Toolmesh MCP Server

In practice, MCP servers only expose a fraction of the REST API they wrap - and you'll hit the gaps fast. ToolMesh lets you replace the wrapper layer with .dadl files - a declarative YAML format that describes any REST API as MCP tools. No wrapper server to build, deploy, or maintain. It is available as a remote MCP endpoint.

Teams that want a hosted security endpoint instead of running a local process. The project is written in Go.

VERIFIED ACTIVE

LAST COMMIT 2026-08-23 · ★ 6 · #141 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

Apache-2.0 · Go servers · how we verify → /methodology

01 · Install Toolmesh

before you install - you'll need

Set TOOLMESH_MCP_TIMEOUT, TOOLMESH_EXEC_TIMEOUT, CREDENTIAL_MEMORIZER_API_KEY before connecting.

Claude Code

claude mcp add dunkelcloud-toolmesh --transport http https://{host}:8123/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "dunkelcloud-toolmesh": {
      "url": "https://{host}:8123/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://{host}:8123/mcp

transport: streamable-http

endpoint NOT responding · probed 2026-08-25

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as remote - your agent's requests go to {host}

license Apache-2.0 - declared in the repository

registry namespace io.github.DunkelCloud is GitHub-verified and matches the repo owner

03 · What Toolmesh can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.4.0 · 2026-08-05

ToolMesh 0.4.0 implements the runtime side of the finalized DADL specification v0.2 - every feature the spec's §15.4 Core Runtime profile demands - plus the transport, discovery, and file-handling work accumulated…

v0.3.0 · 2026-06-02

Added · Unit backends (#76) - a new top-level backend type that bundles one or more private MCP (stdio/http) and REST/DADL sub-backends behind a single JavaScript glue module. A unit is a directory under…

v0.2.2 · 2026-04-28

Added · Access-aware gate (#59): DADL access: classifications (read, write, admin, dangerous, or any custom string) are now read at parse time and forwarded to gate policies as ctx.toolAccess. A five-line JS policy is…

04 · Who maintains Toolmesh

toolmesh is maintained by dunkelcloud. It's the only MCP server we track from this author; the repo dates to Mar 2026.

05 · Facts

repository: github.com/dunkelcloud/toolmesh
category: security - ranked #141 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 2 releases in the last 90 days (latest 2026-08-05)
registry: io.github.DunkelCloud/toolmesh (active, first published 2026-04-03 · 3 versions)

06 · Toolmesh FAQ

What is Toolmesh?

Is Toolmesh still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-23 and it shipped 2 releases in the last 90 days. We re-verify nightly.

How do I install Toolmesh?

Run `claude mcp add dunkelcloud-toolmesh --transport http https://{host}:8123/mcp`. The README documents 3 environment variables (TOOLMESH_MCP_TIMEOUT, TOOLMESH_EXEC_TIMEOUT, CREDENTIAL_MEMORIZER_API_KEY) to set first. Set TOOLMESH_MCP_TIMEOUT, TOOLMESH_EXEC_TIMEOUT, CREDENTIAL_MEMORIZER_API_KEY before connecting. You can also paste the ready-made client config above.

07 · Alternatives to Toolmesh

Alternatives to Toolmesh

Maintained security servers if Toolmesh isn't the fit.

Pairs well with

Servers that cover what Toolmesh doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Reolink MCP · Zzop · Skill Audit MCP · Sanction · Haldir

More Go MCP servers · Pituitary · Yutu · Go Model · Bitbucket MCP · Scout · see all