A Model Context Protocol (MCP) server that enables AI agents to execute TCL scripts and manage MCP tool ecosystems. Built with safety and developer experience in mind.
# Install and run (safe mode with Molt runtime)
cargo install tcl-mcp-server
tcl-mcp-server
# Or build from source
git clone https://github.com/cyberdione/mcp-tcl-udf-server
cd mcp-tcl-udf-server
cargo build --release
./target/release/tcl-mcp-server
# OPTIONAL: Build with full unsafe TCL runtime (requires system TCL installation)
# cargo build --release --features tcl- Execute TCL Scripts: Run TCL code through MCP with intelligent safety controls
- Manage MCP Ecosystem: Add, remove, and orchestrate other MCP servers
- Safe by Default: Uses Molt (memory-safe TCL) with sandboxed execution
- Tool Management: Create, version, and organize custom tools
- Cross-Platform: Works on Linux, macOS, and Windows
Choose between two TCL runtime implementations:
- Memory-safe: Written in Rust with built-in safety guarantees
- Sandboxed: No file I/O, no system commands, no network access
- Subset: Core TCL functionality for data processing and algorithms
- Recommended: For production use and untrusted environments
- Documentation: Molt TCL Book
- Full functionality: Complete TCL language with all features
- System access: File I/O, system commands, network operations
- Powerful: Advanced scripting capabilities and system integration
- Risky: Requires trusted environment and careful input validation
- Documentation: Official TCL Documentation
- Restricted Mode (default): Safe TCL execution with limited commands
- Privileged Mode: Full TCL access for advanced use cases
- Runtime Selection: Choose between safe (Molt) and complete (TCL) implementations
# Add external MCP servers
tcl-mcp-server mcp add claude-flow "Claude Flow" -- npx claude-flow@alpha mcp start
# List all servers
tcl-mcp-server mcp list
# Test connectivity
tcl-mcp-server mcp ping claude-flowTools are organized using a namespace system with MCP-compatible naming:
bin__tcl_execute- Execute TCL scriptsuser__alice__utils__reverse_string- User-created toolsmcp__context7__get_library_docs- External MCP server tools
Default (Read-only mode)
tcl-mcp-serverPrivileged Mode (Save/store scripts)
tcl-mcp-server --privileged
# or use the admin wrapper
tcl-mcp-server-admin# Execute TCL directly
tcl-mcp-server run tcl_execute '{"script": "expr {2 + 2}"}'
# List available tools
tcl-mcp-server list
# Get tool information
tcl-mcp-server info tcl_execute
# Manage MCP servers
tcl-mcp-server mcp add my-server "My Server" -- node server.js
tcl-mcp-server mcp remove my-serverClaude Desktop
{
"mcpServers": {
"tcl": {
"command": "/path/to/tcl-mcp-server",
"args": ["--runtime", "molt", "--privileged"]
}
}
}Claude Code
claude mcp add tcl /path/to/tcl-mcp-serverbin__tcl_execute - Execute TCL scripts
{
"script": "set x 5; set y 10; expr {$x + $y}"
}bin__list_tools - List available tools
{
"namespace": "user",
"filter": "utils*"
}docs__molt_book - Access TCL documentation
{
"topic": "basic_syntax"
}sbin__tcl_tool_add - Create custom tools
{
"user": "alice",
"package": "utils",
"name": "reverse_string",
"version": "1.0",
"description": "Reverse a string",
"script": "return [string reverse $text]",
"parameters": [
{
"name": "text",
"description": "Text to reverse",
"required": true,
"type_name": "string"
}
]
}sbin__mcp_add - Add MCP servers programmatically
{
"id": "context7",
"name": "Context7 Server",
"command": "npx",
"args": ["@modelcontextprotocol/server-everything"],
"auto_start": true
}The server supports two TCL runtime implementations that must be selected at compile time:
# Build with Molt runtime only (recommended)
cargo build --release
# The resulting binary uses Molt by default
./target/release/tcl-mcp-server# Build with full TCL runtime (requires system TCL installation)
cargo build --release --no-default-features --features tcl
# The resulting binary uses full TCL
./target/release/tcl-mcp-server# Build with both runtimes available (maximum flexibility)
cargo build --release --features molt,tcl
# Select runtime at startup
./target/release/tcl-mcp-server --runtime molt # Safe mode
./target/release/tcl-mcp-server --runtime tcl # Complete modeWhen built with multiple runtimes, you can choose at startup:
# Command line selection
tcl-mcp-server --runtime molt # Safe: Molt runtime
tcl-mcp-server --runtime tcl # Unsafe: Full TCL runtime
# Environment variable
export TCL_MCP_RUNTIME=molt
tcl-mcp-server
# Priority: CLI args > Environment > Default (Molt)For Molt Runtime (default):
- Rust toolchain only
- No external dependencies
- Works on all platforms
For TCL Runtime:
- System TCL installation required (8.6+)
- Development headers needed for compilation
- Platform-specific setup:
# Ubuntu/Debian sudo apt-get install tcl-dev # macOS brew install tcl-tk # Windows # Install TCL from https://www.tcl-lang.org/software/tcltk/
The build process automatically generates convenience wrappers:
# Generated during build
./target/release/tcl-mcp-server-admin # Privileged mode
./target/release/tcl-mcp-server-molt # Force Molt runtime
./target/release/tcl-mcp-server-admin-molt # Privileged + Molt
./target/release/tcl-mcp-server-ctcl # Force TCL runtime
./target/release/tcl-mcp-server-admin-ctcl # Privileged + TCL# Basic server
tcl-mcp-server mcp add my-server "My Server" -- node server.js
# With environment variables
tcl-mcp-server mcp add my-server "My Server" \
--env "NODE_ENV=production" \
--env "API_KEY=secret" \
-- node server.js
# Custom timeout and retry settings
tcl-mcp-server mcp add my-server "My Server" \
--timeout-ms 60000 \
--max-retries 5 \
-- node server.js# List all servers
tcl-mcp-server mcp list
# Detailed view
tcl-mcp-server mcp list --detailed
# Server details
tcl-mcp-server mcp info my-server# Manual connection
tcl-mcp-server mcp connect my-server
# Test connectivity
tcl-mcp-server mcp ping my-server
# Disconnect
tcl-mcp-server mcp disconnect my-server
# Remove server
tcl-mcp-server mcp remove my-server- Restricted Mode: Only essential tools available
- Molt Runtime: Memory-safe, sandboxed execution (see Molt docs)
- No File I/O: Prevents unauthorized file access
- No System Commands: Blocks system-level operations
- Full TCL language access
- Tool management capabilities
- System-level operations possible (especially with TCL runtime)
- Recommended for trusted environments only
- With TCL Runtime: Complete system access (see TCL docs)
┌─────────────┐ ┌──────────────┐ ┌─────────────┐
│ AI Agent ├────►│ MCP Server ├────►│TCL Executor │
│ (Claude) │ │ (JSON-RPC) │ │ (Molt) │
└─────────────┘ └──────────────┘ └─────────────┘
│
▼
┌─────────────┐
│ MCP Manager │
│ (External │
│ Servers) │
└─────────────┘
- Add a tool (requires privileged mode):
tcl-mcp-server run sbin__tcl_tool_add '{
"user": "dev",
"package": "math",
"name": "fibonacci",
"version": "1.0",
"description": "Calculate Fibonacci number",
"script": "proc fib {n} { if {$n <= 1} {return $n} else {return [expr {[fib [expr {$n-1}]] + [fib [expr {$n-2}]]}]} }; return [fib $n]",
"parameters": [
{
"name": "n",
"description": "Number to calculate Fibonacci for",
"required": true,
"type_name": "integer"
}
]
}'- Use the tool:
tcl-mcp-server run user__dev__math__fibonacci '{"n": 10}'Query runtime capabilities for intelligent code generation:
tcl-mcp-server run tcl_runtime_info '{
"include_examples": true,
"category_filter": "safe"
}'Runtime Feature Comparison:
| Feature | Molt Runtime | TCL Runtime |
|---|---|---|
| Memory Safety | ✅ Rust-based, memory-safe | |
| File I/O | ❌ Blocked for security | ✅ Full file operations |
| System Commands | ❌ No exec or system calls |
✅ Complete system integration |
| Networking | ❌ No socket operations | ✅ Full network capabilities |
| Performance | ⚡ Fast startup, low overhead | 🐌 Slower startup, higher memory usage |
| Compatibility | 📚 Core TCL subset | 🔧 Full TCL language + extensions |
| Use Cases | Data processing, algorithms, safe scripting | System administration, complex applications |
| Documentation | Molt Book | TCL Documentation |
FROM rust:1.70 as builder
WORKDIR /app
COPY . .
RUN cargo build --release
FROM debian:bookworm-slim
COPY --from=builder /app/target/release/tcl-mcp-server /usr/bin/
COPY --from=builder /app/target/release/tcl-mcp-server-admin /usr/bin/
CMD ["/usr/bin/tcl-mcp-server"]# Run the test suite
./scripts/run_mcp_tests.sh
# Test specific functionality
python3 tests/test_bin_exec_tool_mcp.pyServer configurations are stored in platform-appropriate locations:
- Linux:
~/.local/share/tcl-mcp-server/ - macOS:
~/Library/Application Support/tcl-mcp-server/ - Windows:
%APPDATA%\tcl-mcp-server\
Server won't start
# Check runtime availability
tcl-mcp-server --runtime molt --privileged
# Enable debug logging
RUST_LOG=debug tcl-mcp-serverMCP server connection fails
# Test connectivity
tcl-mcp-server mcp ping server-id
# Check server logs
TCL_MCP_DEBUG_STDERR=1 tcl-mcp-serverTool not found
# List available tools
tcl-mcp-server list
# Check specific namespace
tcl-mcp-server list --namespace user- Fork the repository
- Create a feature branch
- Add tests for new functionality
- Ensure all tests pass
- Submit a pull request
MIT License - see LICENSE file for details