Thingctx MCP Server

thingctx turns a description of any API, device, or local process into tools an AI agent can call: authorized per operation, over the system's own transport, and the agent never holds your keys. The description is a W3C Web of Things Thing Description (a TD), a plain JSON file naming what the system can do. Write one, or compile it from an OpenAPI spec. The described system is the server, so you run no server per…

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-08-24 · ★ 14 · #30 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

Apache-2.0 · Python servers · how we verify → /methodology

01 · Install Thingctx

before you install - you'll need

Set THINGCTX_APPROVE_WHEN before connecting.

Claude Code

claude mcp add thingctx-thingctx -- uvx thingctx

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "thingctx-thingctx": {
      "command": "uvx",
      "args": [
        "thingctx"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license Apache-2.0 - declared in the repository

pypi package thingctx - check the name against the project README before installing (PyPI has no namespace ownership)

registry vendor namespace com.thingctx - domain-verified with the official MCP registry

03 · What Thingctx can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.2.2 · 2026-07-26

meet the registry schema and name a support channel · 0.2.2, and claim the package for the registry listing

v0.2.1 · 2026-07-26

pre-commit hooks, gitleaks CI, SECURITY.md · auth layer, OpenAPI import, CLI · trust & grounding (approval gating + verify) · reliable invokers (retries + reconnect) · interop demos (node-wot, Eclipse Ditto) · UTCP…

v0.1.3 · 2026-06-15

publish a GitHub Release per tag after PyPI · tighten README and link thingctx.com · Measure MCP (stdio/http) vs thingctx; fix live-registry quickstart · bump version to 0.1.3

04 · Who maintains Thingctx

thingctx is maintained by thingctx. It's the only MCP server we track from this author; the repo dates to Jun 2026.

05 · Facts

category
security - ranked #30 of 182 actively-maintained security servers as of 2026-08-25.
release cadence
4 releases in the last 90 days (latest 2026-07-26)
registry
com.thingctx/thingctx (active, first published 2026-07-26)
packages
pypi:thingctx

06 · Thingctx FAQ

What is Thingctx?

thingctx turns a description of any API, device, or local process into tools an AI agent can call: authorized per operation, over the system's own transport, and the agent never holds your keys. The description is a W3C Web of Things Thing Description (a TD), a plain JSON file naming what the system can do. Write one, or compile it from an OpenAPI spec. The described system is the server, so you run no server per…

Is Thingctx still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 4 releases in the last 90 days. We re-verify nightly.

How do I install Thingctx?

Run `uvx thingctx`. The README documents one environment variable (THINGCTX_APPROVE_WHEN) to set first. Set THINGCTX_APPROVE_WHEN before connecting. You can also paste the ready-made client config above.

Does Thingctx run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Thingctx