OneTool MCP

io.github.beycomPublished by GitHub account beycomv2.2.2Updated Oct 24, 2026

One MCP for devs incl Brave,Google,Tavily,Context7,AWS,Excalidraw,DB,GitHub,DevTools,Playwright

Overview

AI-generated overview

One local MCP server that exposes 250+ developer tools as a Python API, plus a proxy for other MCP servers.

What you can do
OneTool bundles 28 packs of tools that an assistant calls as Python code rather than as individual tool definitions, covering web search, library docs, file operations, SQL databases, document conversion, diagrams, image vision, persistent memory, and RAG knowledge bases. It also proxies existing MCP servers so they can be called as namespaces, and offers runtime control to enable, disable, or restart them. Large outputs can be stored as handles, and secrets are age-encrypted with the key in the OS keychain.
When to use it
Worth considering when an assistant needs many developer tools at once and the token cost of loading each server's definitions is a problem, or when you want search, files, databases, diagrams, and memory behind a single MCP entry. Also useful if you already run several MCP servers and want to keep them without their per-request tool overhead.
Requirements
Runs locally as a stdio process on the user's machine; desktop only, no web executable. Installed via a bootstrap script or with uv (uv tool install 'onetool-mcp[all]'), then initialised with onetool init. No authentication, environment variables, or headers are declared in the manifest, but individual packs such as search providers and proxied servers need their own API keys or tokens configured in onetool.yaml.
Before you install
The install instructions pipe a remote shell script into sh or PowerShell, so review it before running. Proxied servers can be configured with bearer tokens such as PRIVATE_MCP_TOKEN, and search packs need provider API keys; these are stored age-encrypted with the key in the OS keychain. Tools can write, edit, and delete files, run SQL, and restore Git-backed snapshots, so path boundaries and permissions matter. Anonymous startup telemetry is sent unless DO_NOT_TRACK=1 or telemetry.enabled…

Installation

In SourceWeft

  1. Open OneTool MCP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[OneTool]

🧿 One MCP for developers - no tool tax, no context rot.
250+ tools your agent calls as Python code: search, docs, files, databases, diagrams, vision, memory - plus a proxy for every MCP server you already use.

[PyPI] [License] [Python] [GitHub stars]

Works with Claude Code, Cursor, Codex - any MCP client


The Problem

Every MCP server re-sends its tool definitions on every request: 3K-30K tokens each. Connect 5 servers and you've burned 55K tokens before the conversation starts. Connect 10+ and you're at 100K.

The math is brutal: Claude Opus 4.5 at $5/M input tokens, 20 days × 10 conversations × 10 messages × 3K tokens = $30/month per MCP server - even if you never use the tools.

And then there's context rot - your AI literally gets dumber as you add more tools (Chroma Research, 2025).

The Solution

OneTool is one MCP server that exposes tools as a Python API. Instead of reading tool definitions, your agent writes code:

python
__onetool brave.search(query="react 19 server components")

Configure one MCP server. Use unlimited tools - ~2K tokens no matter how many you add.

"Agents scale better by writing code to call tools instead. This reduces the token usage from 150,000 tokens to 2,000 tokens...a cost saving of 98.7%"

— Anthropic Engineering

97% fewer tokens. 30× lower cost. No context rot. (Measured - 47,660 → 1,131 input tokens against 18 MCP servers.)

📖 Read the full story


Code Is the Interface

Because tools are Python functions, your agent does things tool-call JSON can't: batch, chain, loop, compose.

python
__onetoolpage = webfetch.fetch(url="https://fastmcp.dev/changelog", output_format="markdown")notes = ot_llm.transform(data=page, prompt="Summarise the breaking changes")mem.write(topic="deps/fastmcp", content=notes)

Three packs, one request. Intermediate results flow between tools as variables - the page body never touches your context window, and the summarising runs on a cheap model instead of your expensive coding agent.

Every call is explicit and reviewable - __onetool brave.search(query="...") shows you exactly what runs. No tool-selection guessing.

And the runtime is built for how agents actually type:

  • mem.search(q="auth") works - any unambiguous parameter prefix resolves (q= → query=)
  • wb.draw(...) works - packs have short aliases (wb, ctx, img)
  • github.listRepositories() works on proxied servers - snake/camel/Pascal all resolve
  • A typo'd tool gets a did-you-mean, a disconnected server names the command that fixes it
  • Oversized results come back as a searchable handle instead of flooding the window

Install

Bootstrap (installs uv if missing, installs OneTool, initialises config, prints MCP config):

bash
curl -LsSf https://onetool.beycom.online/install.sh | sh          # macOS / Linuxirm https://onetool.beycom.online/install.ps1 | iex               # Windows (PowerShell)

Or install manually with uv:

bash
uv tool install 'onetool-mcp[all]'   # everythingonetool init --config ~/.onetool

Then print ready-to-paste MCP client config with resolved absolute paths and add it to your client (claude-code, claude-desktop, cursor, or vscode):

bash
onetool init mcp-config --client claude-code   # or omit --client for all four

That's it. All 250+ tools work out of the box.

Verify: onetool init validate --config ~/.onetool/onetool.yaml

Install the ot-ref skill into your agent with vercel-labs/skills - it teaches the call conventions and ships a greppable index of every tool signature:

bash
npx skills add https://github.com/beycom/onetool-mcp --skill ot-ref --agent claude

📖 Full installation guide


What's Inside

Search & docsBrave, Google-grounded, and Tavily search (each with batch + answer modes), Context7 library docs, web fetch with extraction controls
Files & dataFile ops with path boundaries, full Excel control, SQL databases, PDF/Word/PowerPoint → Markdown, ripgrep, package versions
Context economyctx handles for large outputs, partial file reads (toc/slice), image vision on a dedicated cheap model (zero host tokens), LLM delegation (10× savings)
Persistent statemem memory with semantic + keyword search, history and rollback; knowledge RAG bases with AI enrichment; localhist Git-backed project snapshots
VisualLive Excalidraw whiteboard with a Mermaid-compatible DSL and offline auto-layout, Mermaid/PlantUML/D2 diagrams, architecture models → draw.io-editable SVG
RuntimeMCP server proxy with runtime enable/disable/restart, direct CLI/API into the running process, ot-ref agent skill, in-conversation tool forging
Trustage-encrypted secrets backed by your OS keychain, AST validation, path boundaries, output sanitisation, runtime stats with estimated savings

Tools

28 packs, 253 tools ready to use (console in beta):

PackToolsExtraDescription
archgenerate, validate, bundle_solution, …[dev]Architecture models → draw.io-editable SVG
bravesearch, news, image, video, search_batch[util]Brave web search
chrome_utilhighlight_element, guide_user, …[dev]Browser annotations (Chrome DevTools)
console (beta)show, display, list, read, clearMessages to the upcoming onetool-console app
context7search, doc[dev]Library documentation
convertpdf, word, powerpoint, excel, auto[util]Documents → Markdown
dbquery, schema, tables, sample[dev]SQL databases
diagramrender_diagram, batch_render, get_template, …[dev]Mermaid / PlantUML / D2 via Kroki
excelread, write, formula, create_table, … (24 tools)[util]Full Excel control
fileread, write, edit, grep, slice, toc, … (16 tools)[util]File ops with path boundaries
groundsearch, dev, docs, reddit, search_batch[util]Google-grounded search with sources
knowledgesearch, ask, write, related, … (15 tools)[util]RAG knowledge bases (hybrid search)
localhistsave, diff, restore, autosave_start, … (15 tools)[dev]Git-backed local history snapshots
memwrite, search, ask, history, rollback, … (31 tools)[util]Persistent memory with semantic search
othelp, tools, stats, status, result, … (18 tools)Introspection and management
ot_context (ctx)write, read, grep, slice, toc, ask, … (13 tools)Smart context store for large outputs
ot_forgecreate_ext, validate_extScaffold new tool packs
ot_image (img)load, ask, clip_ask, summary, … (9 tools)Image vision via a dedicated model
ot_llmtransform, transform_fileLLM-powered transforms
ot_secretsset, encrypt, audit, rotate, … (8 tools)Encrypted secrets management
ot_serversenable, disable, restart, statusRuntime control of proxied servers
ot_timerstart, stop, elapsed, list, clearNamed timers
packagepypi, npm, version, audit, models[dev]Package versions and staleness
play_utilhighlight_element, guide_user, …[dev]Browser annotations (Playwright)
ripgrepsearch, count, files, types[dev]Fast code search
tavilysearch, research, extract, search_batch, …[util]AI-native search and extraction
webfetchfetch, fetch_batch[dev]Web content extraction
whiteboard (wb)open, draw, layout, screenshot, … (22 tools)[util]Live Excalidraw canvas

📖 Complete tools reference — every signature, generated from source


MCP Server Proxy

Keep the MCP servers you already use. Wrap them in YAML and call them explicitly - as Python namespaces, without their tool tax:

yaml
# .onetool/onetool.yamlservers:  local_tools:    type: stdio    command: npx    args: ["-y", "some-mcp-server@latest"]  private_api:    type: http    url: ${PRIVATE_MCP_URL}    auth:      type: bearer      token: ${PRIVATE_MCP_TOKEN}
python
__onetool private_api.read_resource(path="README.md")

Proxied servers can be enabled, disabled, and restarted mid-conversation with ot_servers - no client restart.

📖 Configuration guide


Secrets You Can Commit

onetool init walks you through encrypted secrets: values in secrets.yaml are age-encrypted, the private key lives in your OS keychain, and decryption happens transparently at load.

yaml
# secrets.yaml - safe to inspect, safe to commitbrave_api_key: age1enc:YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNT...

📖 Security guide


Use from the CLI

Works as an MCP server and as a direct CLI bridge into the same running process - loaded config, secrets, and proxy connections stay warm. Useful for agent harnesses, scripts, and automation:

bash
# Recommended local MCP root mode: stdioonetool serve --config .onetool/onetool.yaml
# URL-based MCP root mode for containerized clientsonetool serve --transport http --config .onetool/onetool.yaml --host 127.0.0.1 --port 8767 --path /mcp
# Enable the MCP-owned direct API in onetool.yaml:# direct.host.enabled: true
# Start OneTool as MCP, then use the port printed in startup logs.onetool direct run --port 8765 "ot.packs()" --format json | jq '.[0].name'onetool direct run --port 8765 "brave.search(query='latest AI news')" --format raw

📖 Direct usage guide


Extending

Drop a Python file, get a pack. No registration, no config:

python
# .onetool/tools/wiki.pypack = "wiki"
def summary(*, title: str) -> str:    """Get Wikipedia article summary."""    import httpx    url = f"https://en.wikipedia.org/api/rest_v1/page/summary/{title}"    return httpx.get(url).json().get("extract", "Not found")
python
__onetool wiki.summary(title="Python_(programming_language)")

📖 Creating tools guide


Documentation


References


Telemetry

OneTool sends anonymous startup pings (event type, version, OS). No personal data. Opt out: export DO_NOT_TRACK=1 or set telemetry.enabled: false in onetool.yaml. Details


Issues

Check for existing issues first:

Raise a new issue: github.com/beycom/onetool-mcp/issues/new


Support

If you find OneTool useful:

[Ko-fi]


License

GPLv3

Source: README.md at commit 0445d6a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v2.2.2LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts