Backlot MCP server
io.github.brekkylab/backlot·v0.1.0·260 starsLocal emulator for Slack, Gmail, Drive, GitHub, Jira, Notion, S3 and more, with per-document ACLs
260 stars132 downloads/wk
Reviews
Write oneNobody has reviewed Backlot yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Backlot tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-24 · same rubric, same numbers if you re-run it
- Code scan119 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 1 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Findings (1)
- mediumsubprocess with shell=True
exec.shell-truebacklot-0.1.0/pyproject.toml: … # eval "S602", # subprocess with shell=True "S604", # a call with shell=True …
How Backlot compares
Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 86/100
- higher than 79% of 914 Email servers
- GitHub stars
- 260
- more than 95% of 493 Email servers
- Downloads a week
- 132
- more than 65% of 227 Email servers with a package
Install Backlot in Claude Code, Cursor or VS Code
claude mcp add backlot -- uvx backlot
What the publisher says
From the Backlot repository's README, as published. We do not edit it. Read it on GitHub
Backlot
Run enterprise SaaS APIs locally.
Backlot is a local emulator for Slack, Gmail, Google Drive, GitHub, Jira, Notion, S3 and other enterprise APIs. It reproduces the response shapes, pagination, authentication, errors and per-document access controls an integration has to handle, over a deterministic corpus you control — so you build and test against the official vendor SDKs with no vendor account, no OAuth approval, no secrets in CI and no network.
Try it in 60 seconds
pip install backlot
backlot import --bundled # a corpus ships with the package; nothing to fetch or write
backlot serve # every supported API, at http://127.0.0.1:8000Point an official SDK at it by changing one base URL:
from slack_sdk import WebClient # pip install slack_sdk
slack = WebClient(token="admin-service-token", base_url="http://127.0.0.1:8000/slack/api/")
print(slack.conversations_list()["channels"])The same call targets Slack in production and Backlot in development. Backlot supplies the data and the credentials; your code keeps the vendor's request and response contract.
A test can run its own server instead, on a free port, with nothing to start or clean up:
import backlot
from slack_sdk import WebClient
with backlot.serve() as s: # no arguments: a tiny hello-world corpus
slack = WebClient(token=s.token, base_url=f"{s.base_url}/slack/api/")
channels = slack.conversations_list()["channels"]Let your coding agent run Backlot instantly
This repo is its own plugin marketplace, so the agent skill installs with no clone and no pip install first. Or hand the agent every source as MCP tools: backlot mcp starts a server if none is running and serves them all over stdio, with --user answering as that person.
claude plugin marketplace add brekkylab/backlot && claude plugin install backlot@brekkylab
codex plugin marketplace add brekkylab/backlot && codex plugin add backlot@brekkylab
pip install "backlot[mcp]" && claude mcp add backlot -- backlot mcp # every source as MCP toolsand prompt like this:
Mock our Slack workspace with three messages in an #incidents channel, get a server running, then show me what conversations.history actually returns for that channel.
Why not use mocks?
A hand-written mock returns the response your code already expects. Backlot implements the other side of the integration, so it exposes the assumptions a mock would repeat — it is for when the behavior of the API, not just the contents of one response, is what you need to test.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Backlot: common questions
- Is Backlot MCP server safe?
- Yes, by our scan: it is graded A (86/100). Read the Backlot safety report
- How do I install Backlot?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Backlot need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Backlot maintained?
- The last commit was 8 days ago (2026-10-23). The latest release is v0.1.0.
- What can I use instead of Backlot?
- Servers from other publishers that do the same job: Connected Apps MCP server, PipesHub MCP server and Workspace MCP server. Compare all Backlot alternatives.
- How does Backlot compare with other Email MCP servers?
- safety score 86/100 (higher than 79% of 914 Email servers); github stars 260 (more than 95% of 493 Email servers); downloads a week 132 (more than 65% of 227 Email servers with a package). Full comparison.
Alternatives to Backlot
Same job from other publishers: the closest match first, then the best rated.
- Connected AppsRead Gmail, search GitHub, update Sheets, and post to Slack through Composio.not reviewedEstablishedA
- PipesHubPermissioned search and cited answers over Slack, Drive, Gmail, Jira, and 50+ workplace sources.not reviewedEstablishedC
- WorkspaceGoogle Workspace MCP server for Gmail, Drive, Calendar, Docs, Sheets, Slides, Forms, Tasks, Chat.not reviewedWidely usedA
- Google WorkspaceGive AI agents access to Gmail, Calendar, Drive, and more — multi-account, manifest-drivennot reviewedEstablishedA
- Google Workspace MCP Server67 curated MCP tools for Google Workspace: Gmail, Calendar, Drive, Sheets, Docs, Slides, Tasks.not reviewedGrowingA