AI Workbench MCP

AI Workbench MCP

[CI] [CodeQL] [OpenSSF Scorecard]

[English] [Türkçe]

A tiny, read-only MCP server for reusable AI prompts and assistant blueprints.

[MCP read-only] [Python 3.10+] [Dependency-free runtime] [MIT]

AI Workbench MCP exposes a small local catalog over Model Context Protocol stdio. It is intentionally boring in the best way: no network calls, no shell execution, no account access, no file writes, no hidden provider request.

It gives an MCP host three tools:

Why this exists

A lot of AI repos jump straight from "here is a prompt" to "this is an agent." I wanted a smaller boundary that is easy to inspect.

The server keeps the useful parts local and makes its limits obvious:

• read-only tool contracts;
• explicit MCP trust hints;
• bounded input sizes;
• strict top-level schemas;
• no runtime dependencies outside the Python standard library;
• real stdio handshake tests;
• named tests for every public tool.

Quick start

Install the published alpha package:

python -m pip install "alptugharun-ai-workbench-mcp==0.1.0a1"

Then point a stdio-capable MCP host at the server:

Launch command:

alptugharun-ai-workbench-mcp

This repository documents the stdio server itself. For the host we have actually exercised, use the copy/paste Cursor setup and 3-tool verification guide. Other MCP clients can differ, so use their current documentation rather than assuming Cursor's configuration is portable.

Security model

Every public tool declares:

{  "readOnlyHint": true,  "destructiveHint": false,  "idempotentHint": true,  "openWorldHint": false}

The implementation does not import HTTP clients, subprocess modules, filesystem-write helpers, browser libraries, or provider SDKs.

That does not mean "trust any MCP server." It means this repository keeps its own boundary narrow and testable.

Verify it yourself

python -m unittest discover -s tests -vpython examples/smoke_client.py

CI runs the package and protocol tests on Linux and Windows.

Package / registry status

PyPI: alptugharun-ai-workbench-mcp==0.1.0a1 is published through GitHub OIDC Trusted Publishing. The release workflow also signs the wheel with keyless Sigstore.

A clean Windows virtual environment installed the exact PyPI version successfully, negotiated MCP protocol 2025-06-18, listed all three tools, completed successful render_prompt and get_assistant calls, and returned a bounded error for an unknown tool.

Official MCP Registry: io.github.alptugharun/ai-workbench-mcp is published and currently reports active in the production registry.

Real-host verification: a maintainer-run Cursor 3.20.21 session invoked list_prompts, render_prompt and get_assistant successfully against the published package. This is host evidence, not an independent third-party endorsement or a universal compatibility claim.

See REGISTRY-PUBLISHING.md and HOST-VERIFICATION.md.

Contributing

Small, reproducible improvements are welcome. The most useful contributions right now are:

• real MCP host verification;
• protocol edge-case tests;
• clearer failure messages;
• documentation corrections;
• narrowly scoped catalog improvements.

Please read CONTRIBUTING.md before opening a PR.

Origin

This project was extracted from AI Social Media Toolkit so the MCP server can evolve as a focused product instead of being buried inside a larger creator/AI repository.

Built by Alptuğ Harun.

License

MIT — see LICENSE.