MCP.Market

Prefab MCP server

by prefabapp.io·io.prefabapp/prefab·v0.1.1·2 stars

List, create and deploy your Prefab project templates from any MCP agent.

B83/100grade B
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

2 stars35 downloads/wk

Reviews

Write one

Nobody has reviewed Prefab yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Prefab tools (22, 10 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • apply_rules_to_folderwrite action

    Run a watched folder's rules over the files sitting in it now. With dryRun, reports what

  • create_templatewrite action

    Add a new template to the library. Describe the folders and files as a tree; a node with

  • delete_global_placeholderwrite action

    Templates that reference the key will deploy it literally again unless they define it.

  • delete_templatewrite action

    Remove a template from the library. Starter templates cannot be deleted.

  • delete_value_presetwrite action

    A paused folder keeps its rules but stops acting on files that arrive.

  • deploy_templatewrite action

    Create a template's folders and files inside a destination folder, filling in the values

  • describe_template

    The full structure of one template: every folder and file it creates, the placeholders it

  • duplicate_template

    Copy a template. The usual way to build on a starter template, which cannot be edited in place.

  • export_templateswrite action

    Write one or more templates to a .prefab file that can be opened on another Mac. Templates

  • import_archive

    Add the templates in a .prefab file to this library.

  • import_folder

    Turn a project folder that already exists into a template. "contents" keeps the files and

  • list_globals

    Library-wide placeholders, actions and saved value presets - the things defined once and

  • list_templates

    Every template in the user's Prefab library: what it is called, what it creates, and the

  • list_watched_folders

    Folders Prefab is watching, and the rules that run on files landing in them. Explains why a

  • pause_watched_folder

    A paused folder keeps its rules but stops acting on files that arrive.

  • preview_deploywrite action

    What deploying a template into a folder would create, with the given values filled in.

  • request_folder_access

    Prefab is sandboxed and can only work in folders the user has pointed it at. This puts the

  • set_global_placeholder

    A placeholder available to every template that writes {{key}} without defining it itself.

  • set_value_preset

    A named set of answers - "Acme", "Northern Stage" - that fills a deploy prompt in one go.

  • stop_watching_folder

    Forget the folder and its rules. The folder and its files are left alone.

  • undo_watched_folder_runwrite action

    Put back what a watched folder last changed. Files converted without keeping the original,

  • update_templatewrite action

    Change an existing template: its name, description, icon, structure or placeholders.

Public scan report

scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 67 days ago12/15
  • Maintainer identitynamespace and repository owner differ; GitHub account older than a year5/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Prefab compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 1,119 Developer tools servers
Tools
22
the typical Developer tools server has 7
Tools that change things
45%
typical: 5%. Fewer write tools means less an agent can break
GitHub stars
2
more than 65% of 855 Developer tools servers
Downloads a week
35
more than 20% of 436 Developer tools servers with a package

What its tools let an agent do: 7 read · 3 create · 6 change · 3 delete · 3 run or deploy

Install Prefab in Claude Code, Cursor or VS Code

Runs npx -y prefab-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add prefab -- npx -y prefab-mcp
Add to Cursor

What the publisher says

From the Prefab repository's README, as published. We do not edit it. Read it on GitHub

prefab-mcp

An MCP server for Prefab, so an agent can see your templates and deploy one for you.

"Set up a new client folder for Northwind, autumn campaign, on my Desktop"

What it exposes

Setting it up

Works with any client that speaks MCP over stdio.

As a bundle - download prefab.mcpb from the releases page and double-click it. Clients that install MCP bundles, Claude Desktop among them, bring their own Node, so there is nothing else to install.

From the command line (Claude Code, and anything with the same idea):

claude mcp add prefab -- npx -y prefab-mcp

In a config file - Cursor, Zed, and most others:

{
  "mcpServers": {
    "prefab": { "command": "npx", "args": ["-y", "prefab-mcp"] }
  }
}

Then switch on Let agents and scripts control Prefab in Prefab's Settings ▸ Permissions. It is off by default; reading your templates works without it, creating and deploying does not.

That switch arrives in Prefab 1.1.6. On an earlier version the reading tools work and the rest say so.

Requires macOS, Prefab installed and opened once, and Node 18+ (except for the .mcpb route).

How it works

Prefab is sandboxed and has no network access, so it cannot host anything. This server runs beside it instead: it reads the library straight out of the app group (~/Library/Group Containers/group.VFDG327T66.prefab) and asks the app to deploy through the same prefab:// URL the Finder extension uses. Two consequences worth knowing:

of your folders until you point it at one. previewdeploy and deploytemplate both check first and say so, rather than leaving a permission dialog on screen that an agent cannot answer. Grant folders in Prefab, under Settings ▸ Permissions.

  • Prefab has to be running for a deploy. Reading works either way.
  • The destination has to be a folder Prefab has been granted. macOS keeps a sandboxed app out

Nothing here writes to Prefab's library. The app owns those files, and editing them behind its back would be overwritten the next time it saves.

Development

npm test # checks placeholder resolution matches the app's Swift, case for case npm run try '[["list_templates",{}]]' # call a tool the way a client does

src/resolve.js is a deliberate duplicate of RenamePattern.swift. If you change one, change the other - npm test compiles the Swift and compares the two.

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-10-31downgradeA → Bscore 83

Prefab: common questions

Is Prefab MCP server safe?
Mostly: it is graded B (83/100). Read the Prefab safety report
How do I install Prefab?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Prefab need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Prefab maintained?
The last commit was 71 days ago (2026-08-25). The latest release is v0.1.1.
What can I use instead of Prefab?
Servers from other publishers that do the same job: Dockhold MCP server, GitLab MCP Server and Agent Harnesses MCP server.
How does Prefab compare with other Developer tools MCP servers?
safety score 83/100 (higher than 65% of 1,119 Developer tools servers); tools 22 (the typical Developer tools server has 7); tools that change things 45% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Prefab

Same job from other publishers: the closest match first, then the best rated.

  • Dockhold
    Deploy your project to a live HTTPS URL from your AI tool; read logs, set variables, resize apps.
    A
  • GitLab MCP Server
    GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more.
    B
  • Agent Harnesses
    Agent-harness picks, decision guides, setup templates, and skills; live GitHub/HN discovery.
    A
  • walkerOS Flow
    Build, validate, simulate, and deploy walkerOS event pipelines
    B
  • Omnara
    Deploy durable AI agents with Omnara, an open-source managed-agent platform.
    A