coding-tools-mcp plugin: A Model-Neutral Coding Runtime for AI Agents

Coding Tools MCP is a model-neutral coding runtime over the Model Context Protocol, offering file tools, patches, command execution, interactive sessions, and git with permission modes.

What this plugin does

The coding-tools-mcp plugin is a model-neutral coding runtime served over the Model Context Protocol. It provides file reading and search, structured multi-file patches, command execution, interactive sessions, and git operations. Designed for any MCP client, it confines operations to one workspace and gates actions by permission modes.

The coding-tools-mcp plugin is a model-neutral coding runtime that any MCP client can drive. It offers 18 tools for file operations, execution, and git, all confined to a single workspace. Permission modes control network access, shell expansion, and destructive commands. On Linux, Landlock adds kernel-level filesystem confinement. The server supports both stdio and Streamable HTTP transports, and it is designed to be context-window friendly with summarized and paginated results.

Documented capabilities

File and Search Tools

The coding-tools-mcp plugin includes tools for reading files, listing directories, searching text, and viewing images. The applypatch tool is the sole file-mutation primitive, providing staged, baseline-checked, atomic patches with rollback.

Execution and Interactive Sessions

It offers command execution with workspace-bound cwd, scrubbed environment, timeouts, and output caps. Interactive sessions support REPLs and debuggers under a real PTY, with stdin feeding and output paging.

Git Integration

Git tools include status, diff, log, show, and blame. These allow agents to inspect repository history and changes, facilitating code review and commit review.

Practical use cases

Turn a Chat App into a Coding Agent

With the coding-tools-mcp plugin, a chat client like Claude Desktop can read, patch, test, and commit-review a real repository, using existing subscriptions without extra products.

Remote Coding from Anywhere

The plugin supports loopback bind and authenticated HTTPS tunnels, allowing users to drive their home workstation from a phone via claude.ai, with bearer tokens and OAuth 2.1 + PKCE.

Safe Sandbox for Untrusted Code

A containerized server with preconfigured toolchains can be used to safely analyze sketchy pull requests, with the ability to destroy the sandbox afterwards.

Review before you install

Read the source, recent releases, requested permissions, network access, and maintainer history before trusting a third-party plugin.

Frequently asked questions

What is the coding-tools-mcp plugin?

The coding-tools-mcp plugin is a model-neutral coding runtime served over the Model Context Protocol. It provides file tools, patches, command execution, interactive sessions, and git, all confined to a workspace and gated by permission modes.

Which clients can use the coding-tools-mcp?

Any MCP client can use it, including Claude Desktop, Claude Code, Cursor, Cline, or custom agents. The server is model- and vendor-neutral, so you can swap models or clients freely.

How does the coding-tools-mcp ensure safety?

It confines operations to one workspace root, rejects absolute paths and symlink escapes, and uses permission modes to gate network access, shell expansion, and destructive commands. On Linux, Landlock adds kernel-level confinement.