CTRLRun Operator MCP server

by CTRLRun·io.github.CTRLRun/ctrlrun-mcp-operator·v0.12.2·26 stars

No reviews yet

Answer CTRLRun approvals from an MCP client: list what is held, inspect it, grant or deny.

B72/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B72/100

full report

Adoption

Growing

26 stars110 downloads/wk

Reviews

Write one

Nobody has reviewed CTRLRun Operator yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

CTRLRun Operator tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

1 high

Code scan56 source files scanned13/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 4 days ago15/15
Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

highShell command built from a string (injection risk)exec.shell-concat

ctrlrun-0.12.2/src/ctrlrun/conformance/fixtures.py: …] = {"_executor": request.executor} exec(f"def tool({parameters}):\n return _exe…

Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How CTRLRun Operator compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 72/100; higher than 38% of 48,255 servers
GitHub stars: 26; more than 91% of 28,688 servers
Downloads a week: 110; more than 65% of 12,191 servers with a package

Install CTRLRun Operator in Claude Code, Cursor or VS Code

claude mcp add ctrlrun-mcp-operator -- uvx ctrlrun

Add to Cursor

What the publisher says

From the CTRLRun Operator repository's README, as published. We do not edit it. Read it on GitHub

ctrlrun stops AI agents from taking wrong, restricted, or malicious actions in your workflows. Every action is checked against your rules before it runs. Allowed actions go through. Sensitive ones wait for a person. Forbidden ones are blocked. Execution safety for AI agents. A Python library that sits between the decision to act and the call that acts. A consequential action happens at most once, exactly as approved, and leaves a receipt. When the outcome is unknown, ctrlrun says so instead of guessing. Runs in production on a single file, or on Postgres across hosts. Apache-2.0.

pip install ctrlrun && ctrlrun demo

What it does

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

CTRLRun Operator: common questions

Is CTRLRun Operator MCP server safe?: Mostly: it is graded B (72/100). Read the CTRLRun Operator safety report
How do I install CTRLRun Operator?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does CTRLRun Operator need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is CTRLRun Operator maintained?: The last commit was 24 days ago (2026-10-11). The latest release is v0.12.2.
How does CTRLRun Operator compare with other MCP servers?: safety score 72/100 (higher than 38% of 48,255 servers); github stars 26 (more than 91% of 28,688 servers); downloads a week 110 (more than 65% of 12,191 servers with a package). Full comparison.