Fail-closed MCP adapter for untrusted model output over a local Tkach runtime.
Connect Runs on your machine
claude mcp add tkach-security -e TKACH_HTTP_ADDR=<TKACH_HTTP_ADDR> -e TKACH_BEARER_TOKEN=<TKACH_BEARER_TOKEN> -- tkach-mcp
{
"mcpServers": {
"tkach-security": {
"command": "tkach-mcp",
"args": [],
"env": {
"TKACH_HTTP_ADDR": "<TKACH_HTTP_ADDR>",
"TKACH_BEARER_TOKEN": "<TKACH_BEARER_TOKEN>"
}
}
}
}
{
"mcpServers": {
"tkach-security": {
"command": "tkach-mcp",
"args": [],
"env": {
"TKACH_HTTP_ADDR": "<TKACH_HTTP_ADDR>",
"TKACH_BEARER_TOKEN": "<TKACH_BEARER_TOKEN>"
}
}
}
}
{
"servers": {
"tkach-security": {
"type": "stdio",
"command": "tkach-mcp",
"args": [],
"env": {
"TKACH_HTTP_ADDR": "<TKACH_HTTP_ADDR>",
"TKACH_BEARER_TOKEN": "<TKACH_BEARER_TOKEN>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
TKACH_HTTP_ADDROptional | Loopback address of the already running Tkach HTTP runtime. |
TKACH_BEARER_TOKENRequired, secret | Trusted bearer proof for the local runtime. |
Details
| Package | [email protected] (CARGO, stdio) |
| First published | 19 Sep 2026 |
| Last updated | 19 Sep 2026 |
| Registry name | io.github.ECD5A/tkach-security |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
