wcgw MCP
An interactive shell and file editing in one MCP server, plus a VS Code extension. The author warns: the server gives unfiltered access to the shell and files
- 678 ★ on the repository
- Last commit
- Apache-2.0
Broad access
Why this level
- Unfiltered access to the shell and files of the machine
- The server restricts nothing itself
Install
- Works in
Manual install
uvx --python 3.12 wcgw@latestuv is better installed through Homebrew: brew install uv. HTTP: add --transport streamable-http --host 127.0.0.1 --port 8765. Run it in an isolated environment.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Unfiltered access to the shell and files of the machine
- The server restricts nothing itself
This is third-party code. Review the repository files before installing.
What it does
wcgw is an MCP server with an interactive shell and file editing, with a VS Code extension. The README warns that the server gives unfiltered access to the shell and files of your machine and restricts nothing. Launch: `uvx --python 3.12 wcgw@latest`, and per the README uv is better installed through Homebrew: `brew install uv`. For HTTP: `uvx --python 3.12 wcgw@latest --transport streamable-http --host 127.0.0.1 --port 8765`. Version 5.6.6 from 12.09.2026, Apache-2.0 license.
Who it is for. For developers who knowingly give an agent a shell and file editing on their machine and know how to limit it with an environment.
Good fit when
- You need an interactive shell for an agent through MCP
- You need file editing and command running in one server
- You need an MCP server for work in VS Code
Not a fit when
- You cannot give an agent unfiltered access to a machine
- You need a sandbox: the server restricts nothing itself
Example request
Run the project tests in the shell, show the failed ones and suggest a file edit without applying it without confirmationMCP
- Transport
- stdio, http
- Authentication
- not required
Limitations
The author warns directly: the server gives unfiltered access to the shell and files of your machine and restricts nothing, so access is wide. Run it in an isolated environment: a virtual machine, a container or a separate user, and not on a machine with personal data. Check commands before they run.
How to disable. Remove the server entry from the client and the uvx cache with uv cache clean if needed.
FAQ
What does wcgw do?
It gives an agent an interactive shell and file editing through MCP.
Is it safe?
The author warns about unfiltered access to the shell and files: run it in an isolated environment.
How do I launch it?
uvx --python 3.12 wcgw@latest, with uv better installed through Homebrew.
Discussion
No questions or reviews yet.
Related
MCP serversAn MCP server that lets an agent read files, search code and run commands in a workspace
The official Microsoft MCP server for debugging: a VS Code extension and a CLI give an agent breakpoints, steps, variables and expression evaluation
A VS Code and Cursor extension that exposes 1C: Platform Tools commands to the agent: tests, launch profiles, configuration builds and infobase work
A dependency-free CLI and MCP server that builds a call graph of a repository so the agent understands code without reading whole files
A fast MCP server in Rust extended with WebAssembly plugins: plugins load from OCI, files, http(s) and s3, and OCI signatures can be verified
A self-hosted MCP server that gives ChatGPT and other clients access to code on your machine: read, edit, search and run commands
Comparison with similar tools
Entries that share the main search query, and how they differ.
| Entry | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| wcgw (this entry) | no | not required | 678 | |
| MCP SSH Manager | no | API key | 506 | SSH to several servers with the default mode unrestricted |
| SSH MCP | no | API key | 804 | an SSH server with command classification and policies |
README in short
The README describes an MCP server with an interactive shell and file editing, a warning about unfiltered access and launch through uvx. Apache-2.0 license.