Model Context Protocol moderate risk

Homebrew

This MCP server exposes Homebrew package management commands on macOS, enabling LLMs to install, update, and manage software via the command line.

Connections & Capabilities

Connects To

GitHubDiscordDocker

Capabilities

readwriteexec

Quickstart

Install

brew install uv

Config

{
  "mcpServers": {
    "homebrew-mcp": {
      "command": "uv",
      "args": [
        "run",
        "--directory",
        "/path/to/your/project/",
        "homebrew_mcp.py"
      ],
      "type": "stdio"
    }
  }
}

Exposed MCP Tools (16)

high

install

Installs a specified package using Homebrew.

Modifies the system by installing software.

high

uninstall

Uninstalls a specified package using Homebrew.

Modifies the system by removing software.

high

upgrade

Upgrades a specified package using Homebrew.

Modifies the system by updating software.

moderate

cleanup

Cleans up outdated packages and dependencies using Homebrew.

Removes outdated files, potentially affecting system state.

safe

list

Lists all installed packages using Homebrew.

Read-only operation.

safe

search

Searches for a package using Homebrew.

Read-only operation.

safe

info

Displays information about a package using Homebrew.

Read-only operation.

safe

outdated

Checks for outdated packages using Homebrew.

Read-only operation.

safe

deps

Displays dependencies of a package using Homebrew.

Read-only operation.

safe

doctor

Runs Homebrew's doctor command to check for potential issues.

Read-only operation.

moderate

update

Updates Homebrew itself.

Updates Homebrew, potentially changing its behavior.

high

tap

Adds a new Homebrew tap.

Adds a new software source, potentially untrusted.

moderate

untap

Removes a Homebrew tap.

Removes a software source.

moderate

pin

Pins a package to prevent it from being upgraded.

Modifies Homebrew's configuration.

moderate

unpin

Unpins a package, allowing it to be upgraded.

Modifies Homebrew's configuration.

high

services

Manages Homebrew services (start, stop, restart).

Can start or stop system services.

Safety Assessment

This server is relatively safe for read-only operations. However, write operations like installing or uninstalling packages carry a moderate risk due to the potential for unintended or malicious commands. Exercise caution when granting autonomy.

Requires local execution, limiting external exposure.
Uses subprocess calls to `brew`, leveraging existing macOS security.
Logs all requests and results for auditing.
No external network access except for Homebrew's usual operations.

Executes arbitrary `brew` commands, posing a risk if prompts are malicious.
No built-in input validation or sanitization.
Relies on the security of the underlying Homebrew installation.
Potential for denial-of-service if Homebrew operations are resource-intensive.