Toolpiper

io.github.ModelPiperPublished by GitHub account ModelPiperv0.0.10-betaUpdated Oct 25, 2026

On-device MCP tools for macOS: local AI, speech, vision, browser automation, system control.

VerifiedSTDIODesktop onlyBrowser AutomationDeveloper ToolsAI & ML

Overview

AI-generated overview

ToolPiper is a native macOS app whose local MCP server exposes 450+ on-device tools for local AI, speech, vision, browser automation and system control.

What you can do
  • Run local LLM chat, speech-to-text, text-to-speech and embeddings on the Mac
  • OCR images, analyze images and text, and query a local document index
  • Drive Chrome through CDP: snapshots, actions, assertions, network mocking, Web Vitals
  • Save, replay and export browser tests to Playwright or Cypress
  • Control the system: windows, Spaces, clipboard, audio, displays, Finder, Calendar, Reminders, Contacts, notifications, processes, network, Bluetooth and Shortcuts
  • Record and edit screen video, compare GitHub repos, manage the content queue, read Search Console, and search, download and load models
When to use it
Useful when you want an assistant on a Mac to act on the local machine and use local models without cloud services: desktop automation, browser testing, OCR and speech, or private document search. It suits Apple Silicon Macs running macOS 26 or later.
Requirements
macOS 26 or later on Apple Silicon, plus the ToolPiper app installed and launched once. The MCP endpoint is Streamable HTTP on loopback port 9998; loopback needs no auth, while LAN and remote peers use a bearer token. No API keys or account for local use; network only for model downloads and optional cloud providers.
Before you install
System tools can change windows, clipboard, files, calendars, contacts and processes, and browser tools act on live pages, so review what the assistant is allowed to do. The app is proprietary and contacts its own servers for update, license and daily activity checks, with optional usage counts to PostHog that can be turned off. Paid plans unlock more of the catalog.

Installation

In SourceWeft

  1. Open Toolpiper in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

ToolPiper MCP Server for macOS

450+ Model Context Protocol tools, all running on-device. ToolPiper is a native macOS app that turns your Mac into a local AI platform: bundled inference (llama.cpp on Metal, Apple Intelligence, speech on the Neural Engine), an OpenAI-compatible API at localhost:9998, and a built-in MCP server that exposes the whole machine to any MCP client: Claude Code, Cursor, Codex, or your own scripts.

No cloud required for local models. No Docker. No Python. No API keys. Your prompts, files and outputs stay on your Mac, and you can check what ToolPiper connects to yourself: lsof -i -P | grep ToolPiper while it runs.

This repository is the official home for ToolPiper's MCP server manifest (server.json), the Claude Code plugin (plugins/toolpiper), and the setup guides. The ToolPiper app itself is not open source, but its privacy claims do not ask for trust: every byte of network traffic is observable on your own machine. Open-source siblings live in this org: PiperSR (ANE super-resolution model), FluidAudio, mlx-audio-swift.

Quick start

Install ToolPiper, launch it once, then connect any MCP client over Streamable HTTP. Loopback connections need no auth: no token, no OAuth step.

Download the disk image from modelpiper.com/download, or install with Homebrew:

bash
brew tap modelpiper/tapbrew trust modelpiper/tapbrew install --cask toolpiper

The trust line is required once: Homebrew 6 refuses casks from taps outside its own until you trust them.

Claude Code, as a plugin (one server entry, nothing to configure by hand):

bash
claude plugin marketplace add ModelPiper/toolpiperclaude plugin install toolpiper@modelpiper

Claude Code, as a manual server:

bash
claude mcp add -s user --transport http toolpiper http://127.0.0.1:9998/mcp

Codex, as a plugin:

bash
codex plugin marketplace add ModelPiper/toolpipercodex plugin add toolpiper@modelpiper

Or as a manual server: codex mcp add toolpiper --url http://127.0.0.1:9998/mcp. Codex signs in to ToolPiper once; approve ToolPiper's consent page when it appears.

Any other MCP client, in its server configuration:

json
{  "mcpServers": {    "toolpiper": { "type": "http", "url": "http://127.0.0.1:9998/mcp" }  }}

Claude Desktop, as a one-click extension: download toolpiper-1.0.1.mcpb from Releases and double-click it; Claude Desktop shows its install sheet. The JSON block above does not apply to Claude Desktop, whose config file runs local stdio servers only. Source, build script and privacy statement: desktop-extension/. It is a small Node.js forwarder that relays Claude Desktop's stdio to the same loopback server, and it serves the directory profile: the catalog minus every tool that uses an AI model to generate images, video or audio.

Installing with an AI agent? Point it at llms-install.md.

What's in the catalog

450+ tools, 5 resources, and 5 workflow prompts. Names follow <category>_<action> (vision_ocr, system_window_snap, browser_assert). The live catalog, with per-tool documentation, is at modelpiper.com/mcp-tools.

CategoryExamplesWhat it covers
Core AIchat, audio_transcribe, audio_speak, text_embedLocal LLM inference, speech-to-text and text-to-speech on the Neural Engine, embeddings
Apple frameworks + RAGvision_ocr, image_analyze, text_analyze, rag_queryApple Vision OCR, image analysis, natural-language analysis, hybrid HNSW + BM25 document search
Browser automationbrowser_snapshot, browser_action, browser_assert, browser_interceptChrome via CDP: AX-tree snapshots, self-healing selectors, network mocking, Web Vitals, coverage
Testingtest_run, test_save, test_exportSaved browser test sessions, fast replay, Playwright/Cypress export
System actionssystem_*Windows, Spaces, clipboard (with OCR'd history), audio, displays, Finder, Calendar, Reminders, Contacts, notifications, processes, network, Bluetooth, Shortcuts, and more
Video creatorvideo_record, video_render, video_edit_timelineScreen-recorded screenplays, non-destructive timeline editing, OTIO/FCP XML/EDL export
Outreachgithub_compare, queue_add, gsc_analyticsGitHub, the content queue, Google Search Console
Model managementmodel_search, model_download, model_loadSearch HuggingFace, download GGUF/CoreML, load/unload
Routing + integrationsendpoint_set, endpoint_recommend, claude_code_statusSwitch inference endpoints per session, see how Claude Code connects

Resources: toolpiper://status, toolpiper://models, toolpiper://backends, toolpiper://tests, toolpiper://categories Prompts: setup-model, audit-page, create-test, voice-over, research-topic

Category and profile filtering

Don't want the whole catalog in context? Pass category or profile as a query parameter on the /mcp URL. Both the tool list and the server instructions trim to match:

bash
# Just LLM inference (core category)claude mcp add -s user --transport http toolpiper "http://127.0.0.1:9998/mcp?category=core"
# Web dev workflow (automation profile: core + browser + testing)claude mcp add -s user --transport http toolpiper "http://127.0.0.1:9998/mcp?profile=automation"

Transport

TransportEndpointAuth
Streamable HTTPPOST http://127.0.0.1:9998/mcp (plus GET /mcp, the SSE channel for tools/list_changed)None for loopback peers, enforced at the kernel socket, so Host/Origin spoofing cannot widen it. LAN and remote peers present Authorization: Bearer.

Streamable HTTP is the only transport. ToolPiper has no stdio server, and older guides that described one are obsolete.

Privacy

Your prompts, files and outputs stay on your Mac when you use local models. ToolPiper contacts our servers for update checks, a license check when you're signed in and a daily activity count, and it can send optional usage counts. You can turn the last two off in Settings, and none of them include your content. There are no crash uploads, and local use needs no account. Everything else is traffic you ask for: model downloads from HuggingFace, a cloud provider you add, and tools that explicitly target the web. You can watch it yourself:

bash
lsof -i -P | grep ToolPiper

You will see update, license and activity requests to modelpiper.com hosts, optional usage counts to PostHog if you leave them on, plus any downloads or providers you chose, and none of them carry your content. Full policy: modelpiper.com/privacy.

Requirements and pricing

  • macOS 26 or later on Apple Silicon
  • Free: the full local model runner and every speech feature (transcription, text to speech, dictation). No caps, no account.
  • Paid plans add more of the catalog. The current ladder is at modelpiper.com/pricing.

FAQ

Is this the same as "ToolPipe"? No. ToolPiper (this page, modelpiper.com) is the macOS MCP server by ModelPiper. Unrelated projects with similar names exist in some directories.

What does the MIT license in this repo cover? The contents of this repository: the server manifest, the Claude Code plugin, and the setup guides. The ToolPiper app itself is proprietary.

Does it work without an internet connection? Yes. Inference, speech, vision, RAG, and system tools are all on-device. You only need the network to download models.

Can other machines connect? Loopback is zero-config. LAN and remote access go through bearer-token auth.

I already added ToolPiper with claude mcp add. Do I need the plugin? No. Claude Code keeps your manual toolpiper server and skips the plugin's copy while the manual one exists, so nothing doubles up. The plugin is for a fresh setup, or if you remove the manual entry.

Source: README.md at commit 5902f5b

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

2
  1. v0.0.10-betaLatestOct 16, 2026
  2. v0.0.9-betaSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts