What Labby MCP server does
Labby MCP server acts as a local gateway and operator control plane for MCP services. It accepts upstream servers over HTTP or stdio, inspects their available tools, resources, and prompts, and applies exposure filters before publishing protected MCP routes. A direct proxy mode can launch one stdio server and expose its unchanged MCP surface over loopback or an owned Tailscale Serve HTTPS port.
The gateway supports bearer and OAuth authentication, route-scoped access, and authorization of upstream OAuth connections. It also includes a filesystem service with scoped, path-safety-checked operations, plus access to the local labby serve log stream. Setup, service provisioning, and health auditing are part of the same product surface.
How it works
Labby MCP server can collapse an upstream catalog into Code Mode search and execute actions. Reusable JavaScript snippets can be authored, stored, and run against that catalog, with related artifacts persisted beneath $LABBY_HOME. The same action-dispatch model is used for the filesystem service and other supported services.
The project provides several operating surfaces: a command-line interface, an HTTP API, an MCP gateway, and an operator web UI. It can provision and operate a dedicated gateway host using Incus or bare-metal setup. Generated documentation publishes service, action, environment, proxy, API route, OpenAPI, MCP help, CLI help, and feature-matrix artifacts.
Setup and configuration
The recommended onboarding path uses the reviewed installer, a native service, a loopback listener, generated protected credentials, and a short-lived browser handoff. After installation, labby setup and the product-owned setup checks are still required; installing the binary alone does not complete onboarding.
In the web interface, operators connect an agent provider, select a discovered model, complete a starter agent test, register supported clients, and add and verify an MCP server through Discover. The repository also documents an optional install-labby skill for guided installation and an Agent Package Manager route that registers the stdio MCP launcher for Claude Code and Codex. The npm launcher is available through npx -y @dinglebear/labby mcp, though the README describes it as a weaker trust path than the installer scripts.
Tools and capabilities
The Labby MCP server supports these documented areas:
- Gateway access for HTTP and stdio upstream MCP servers
- Direct stdio proxying with configurable protected exposure
- Bearer and OAuth authentication for routes and upstream connections
- Code Mode catalog search and execution
- Persistent JavaScript snippets and artifacts
- Scoped filesystem actions with path-safety checks
- Local server-log search and tailing
- Setup, doctor, service provisioning, and host operation
Limitations and notes
The current product surface does not include the retired standalone ACP chat, Marketplace or MCP Registry browser, Fleet, Deploy, or older Agent Artifact Manager. Current Linux principal-scoped File Stash is a separate contract. Provider-backed discovery through the artifacts control-plane service does not restore those retired products.
Release installation has compatibility and verification requirements. The documented installer expects GitHub CLI 2.102.0 or newer when that helper is used, and release archives require checksum and provenance verification according to the release type. Older releases may require GitHub authentication for attestation lookup. The README also distinguishes the npm launcher from the more strongly verified installer path.