Prefab MCP server
io.prefabapp/prefab·v0.1.1·2 starsList, create and deploy your Prefab project templates from any MCP agent.
2 stars35 downloads/wk
Reviews
Write oneNobody has reviewed Prefab yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Prefab tools (22, 10 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
apply_rules_to_folderwrite actionRun a watched folder's rules over the files sitting in it now. With dryRun, reports what
create_templatewrite actionAdd a new template to the library. Describe the folders and files as a tree; a node with
delete_global_placeholderwrite actionTemplates that reference the key will deploy it literally again unless they define it.
delete_templatewrite actionRemove a template from the library. Starter templates cannot be deleted.
delete_value_presetwrite actionA paused folder keeps its rules but stops acting on files that arrive.
deploy_templatewrite actionCreate a template's folders and files inside a destination folder, filling in the values
describe_templateThe full structure of one template: every folder and file it creates, the placeholders it
duplicate_templateCopy a template. The usual way to build on a starter template, which cannot be edited in place.
export_templateswrite actionWrite one or more templates to a .prefab file that can be opened on another Mac. Templates
import_archiveAdd the templates in a .prefab file to this library.
import_folderTurn a project folder that already exists into a template. "contents" keeps the files and
list_globalsLibrary-wide placeholders, actions and saved value presets - the things defined once and
list_templatesEvery template in the user's Prefab library: what it is called, what it creates, and the
list_watched_foldersFolders Prefab is watching, and the rules that run on files landing in them. Explains why a
pause_watched_folderA paused folder keeps its rules but stops acting on files that arrive.
preview_deploywrite actionWhat deploying a template into a folder would create, with the given values filled in.
request_folder_accessPrefab is sandboxed and can only work in folders the user has pointed it at. This puts the
set_global_placeholderA placeholder available to every template that writes {{key}} without defining it itself.
set_value_presetA named set of answers - "Acme", "Northern Stage" - that fills a deploy prompt in one go.
stop_watching_folderForget the folder and its rules. The folder and its files are left alone.
undo_watched_folder_runwrite actionPut back what a watched folder last changed. Files converted without keeping the original,
update_templatewrite actionChange an existing template: its name, description, icon, structure or placeholders.
Public scan report
scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it
- Code scan5 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 67 days ago12/15
- Maintainer identitynamespace and repository owner differ; GitHub account older than a year5/10
How Prefab compares
Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 83/100
- higher than 65% of 1,119 Developer tools servers
- Tools
- 22
- the typical Developer tools server has 7
- Tools that change things
- 45%
- typical: 5%. Fewer write tools means less an agent can break
- GitHub stars
- 2
- more than 65% of 855 Developer tools servers
- Downloads a week
- 35
- more than 20% of 436 Developer tools servers with a package
What its tools let an agent do: 7 read · 3 create · 6 change · 3 delete · 3 run or deploy
Install Prefab in Claude Code, Cursor or VS Code
Runs npx -y prefab-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add prefab -- npx -y prefab-mcp
What the publisher says
From the Prefab repository's README, as published. We do not edit it. Read it on GitHub
prefab-mcp
An MCP server for Prefab, so an agent can see your templates and deploy one for you.
"Set up a new client folder for Northwind, autumn campaign, on my Desktop"
What it exposes
Setting it up
Works with any client that speaks MCP over stdio.
As a bundle - download prefab.mcpb from the releases page and double-click it. Clients that install MCP bundles, Claude Desktop among them, bring their own Node, so there is nothing else to install.
From the command line (Claude Code, and anything with the same idea):
claude mcp add prefab -- npx -y prefab-mcp
In a config file - Cursor, Zed, and most others:
{
"mcpServers": {
"prefab": { "command": "npx", "args": ["-y", "prefab-mcp"] }
}
}Then switch on Let agents and scripts control Prefab in Prefab's Settings ▸ Permissions. It is off by default; reading your templates works without it, creating and deploying does not.
That switch arrives in Prefab 1.1.6. On an earlier version the reading tools work and the rest say so.
Requires macOS, Prefab installed and opened once, and Node 18+ (except for the .mcpb route).
How it works
Prefab is sandboxed and has no network access, so it cannot host anything. This server runs beside it instead: it reads the library straight out of the app group (~/Library/Group Containers/group.VFDG327T66.prefab) and asks the app to deploy through the same prefab:// URL the Finder extension uses. Two consequences worth knowing:
of your folders until you point it at one. previewdeploy and deploytemplate both check first and say so, rather than leaving a permission dialog on screen that an agent cannot answer. Grant folders in Prefab, under Settings ▸ Permissions.
- Prefab has to be running for a deploy. Reading works either way.
- The destination has to be a folder Prefab has been granted. macOS keeps a sandboxed app out
Nothing here writes to Prefab's library. The app owns those files, and editing them behind its back would be overwritten the next time it saves.
Development
npm test # checks placeholder resolution matches the app's Swift, case for case npm run try '[["list_templates",{}]]' # call a tool the way a client does
src/resolve.js is a deliberate duplicate of RenamePattern.swift. If you change one, change the other - npm test compiles the Swift and compares the two.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-10-31downgradeA → Bscore 83
Prefab: common questions
- Is Prefab MCP server safe?
- Mostly: it is graded B (83/100). Read the Prefab safety report
- How do I install Prefab?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Prefab need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Prefab maintained?
- The last commit was 71 days ago (2026-08-25). The latest release is v0.1.1.
- What can I use instead of Prefab?
- Servers from other publishers that do the same job: Dockhold MCP server, GitLab MCP Server and Agent Harnesses MCP server.
- How does Prefab compare with other Developer tools MCP servers?
- safety score 83/100 (higher than 65% of 1,119 Developer tools servers); tools 22 (the typical Developer tools server has 7); tools that change things 45% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Prefab
Same job from other publishers: the closest match first, then the best rated.
- DockholdDeploy your project to a live HTTPS URL from your AI tool; read logs, set variables, resize apps.not reviewedGrowingA
- GitLab MCP ServerGitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more.not reviewedWidely usedB
- Agent HarnessesAgent-harness picks, decision guides, setup templates, and skills; live GitHub/HN discovery.not reviewedEstablishedA
walkerOS FlowBuild, validate, simulate, and deploy walkerOS event pipelinesnot reviewedEstablishedB- OmnaraDeploy durable AI agents with Omnara, an open-source managed-agent platform.not reviewedEstablishedA