Mmcp.market

CTRLRun Operator MCP server

by CTRLRun·io.github.CTRLRun/ctrlrun-mcp-operator·v0.12.2
No reviews yet

Answer CTRLRun approvals from an MCP client: list what is held, inspect it, grant or deny.

B72/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
Established

22 stars8.2k downloads/wk

Reviews

Write one

Nobody has reviewed CTRLRun Operator yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

CTRLRun Operator tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high
  • Code scan56 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    ctrlrun-0.12.2/src/ctrlrun/conformance/fixtures.py: …] = {"_executor": request.executor} exec(f"def tool({parameters}):\n return _exe…
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the CTRLRun Operator repository's README, as published. We do not edit it. Read it on GitHub

ctrlrun stops AI agents from taking wrong, restricted, or malicious actions in your workflows. Every action is checked against your rules before it runs. Allowed actions go through. Sensitive ones wait for a person. Forbidden ones are blocked. Execution safety for AI agents. A Python library that sits between the decision to act and the call that acts. A consequential action happens at most once, exactly as approved, and leaves a receipt. When the outcome is unknown, ctrlrun says so instead of guessing. Runs in production on a single file, or on Postgres across hosts. Apache-2.0.

<!-- generated from tools/docsaudit/renderbadges.py (readme) — edit the list, not this --> <!-- end generated -->

pip install ctrlrun && ctrlrun demo

What it does

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

claude mcp add ctrlrun-mcp-operator -- uvx ctrlrun
Add to Cursor

CTRLRun Operator: common questions

Is CTRLRun Operator MCP server safe?
Mostly: it is graded B (72/100). Read the CTRLRun Operator safety report
How do I install CTRLRun Operator?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does CTRLRun Operator need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is CTRLRun Operator maintained?
The last commit was 2 days ago (2026-09-19). The latest release is v0.12.2.

More from CTRLRun →