Pyobfus MCP

pyobfus (pronounced as "Python obfuscator") is a modern, AST-based python-obfuscator / code-obfuscator with framework-aware presets, reverse stack-trace mapping for AI-assisted debugging, and a machine-readable JSON CLI designed for Claude Code, Cursor, GitHub Copilot, Codex, CodeBuddy, and any MCP-compatible AI agent. A transparent, open-source alternative to PyArmor.

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-08-24 · ★ 6 · #42 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

Apache-2.0 · Python servers · how we verify → /methodology

01 · Install Pyobfus MCP

Claude Code

claude mcp add zhurong2020-pyobfus -- uvx pyobfus-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "zhurong2020-pyobfus": {
      "command": "uvx",
      "args": [
        "pyobfus-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license Apache-2.0 - declared in the repository

pypi package pyobfus-mcp - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.zhurong2020 is GitHub-verified and matches the repo owner

03 · What Pyobfus MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Limitations (from the README)

- Keyword Arguments (✅ Resolved in v0.1.6): By default, parameter names are obfuscated, which breaks keyword arguments. Solution: Use the --preserve-param-names flag to preserve parameter names while still obfuscating function bodies. When to use --preserve-param-names: - Public API functions/libraries where keyword arguments are used by clients - Functions with many parameters where keyword arguments improve readabi

Latest releases

mcp-v0.3.8 · 2026-08-24

Adds verify_dependencies_online to check_obfuscation_risks. It defaults to false, preserving the MCP servers zero-outbound-network posture; callers may opt into fixed-host public-PyPI package-name verification. The…

v0.5.17 · 2026-08-24

Adds an experimental dependency-hallucination advisory to pyobfus --check. Declared dependencies in requirements files and pyproject.toml are verified against public PyPI; nonexistent names are reported as medium/info…

vscode-v0.4.1 · 2026-08-22

Docs-only release. "Why trust this extension" section strengthened with the May 2026 Nx Console incident (a Verified-Publisher-badged, 2.2M-install extension that still shipped a credential stealer) - makes the case…

04 · Who maintains Pyobfus MCP

pyobfus-mcp is maintained by zhurong2020. It's the only MCP server we track from this author; the repo dates to Nov 2025.

05 · Facts

repository: github.com/zhurong2020/pyobfus
category: security - ranked #42 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 10+ releases in the last 90 days (latest 2026-08-24)
registry: io.github.zhurong2020/pyobfus-mcp (active, first published 2026-04-22 · 11 versions)
packages: pypi:pyobfus-mcp

06 · Pyobfus MCP FAQ

What is Pyobfus MCP?

Is Pyobfus MCP still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Pyobfus MCP?

Run `uvx pyobfus-mcp`. You can also paste the ready-made client config above.

Does Pyobfus MCP run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Pyobfus MCP

Alternatives to Pyobfus MCP

Maintained security servers if Pyobfus MCP isn't the fit.

Pairs well with

Servers that cover what Pyobfus MCP doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Code Factory · VMware NSX Security · 1Claw Vault · Cybersec Toolkit · Change This File

More Python MCP servers · YouTube Summarize · Quant Context · Zscaler Zero Trust Exchange · Progi · see all