Sponsor MCPSafe10 founding slots
Registry/Arcade MCP Server

Arcade MCP Server

Verified

MCP Server Framework and Tool Development library for building custom capabilities into agents.

MIT
python
ai ml
1.0Kstars
112forks
Scanned Sep 15, 2026
WebsiteRepositoryGITHUB
Public Security Review Pending

Automated security grades and vulnerability claims are hidden while MCPSafe's reviewed-publication gate is active. Registry metadata and quality metrics remain live.

Trust Score 62

Review required
Trust grade C

Trust is stricter than security: it combines reviewed security, MCP capability risk, supply-chain metadata, quality, popularity, freshness, and penalties for unknowns.

Security
MCP risk
56
Supply chain
92
Maintenance
50
Docs
100
Freshness
100
Risk traits
Runs shell commands
Network/API access
Requires secrets
Remote transport
Why it scores well
  • Good documentation surface
  • Solid supply-chain metadata
  • Recently scanned
What reduces confidence
  • No reviewed security score
  • MCP risk traits: Runs shell commands, Network/API access, Requires secrets

Reviewed Security Publication Pending

MCPSafe treats automated scan output as internal evidence until review. Scan dates, versions, and coverage remain visible; public security scores and vulnerability claims appear only after findings pass the reviewed-publication gate.

Security Score?

out of 100

Vulnerabilities Found

0
Crit
0
High
0
Medi
0
Low
0
Info
Last scanned: 9/15/2026

Quality ScoreC

67
out of 100
50
Maint.
44
Popular
100
Docs
72
Compat
Maintenance50%
Popularity44%
Documentation100%
Compatibility72%

Maintenance50

Unknown
Commit Frequency65%
Release Frequency35%
Issue Response45%

Popularity44

1.0K
Stars
0
Downloads
112
Forks
Stars Score84%
Downloads Score0%
Forks Score72%

Documentation100

README Quality100%

Available Documentation

API DocsExamplesChangelog

Compatibility72

MCP Spec Compliance80%
Transport Support75%

Features

TypeScript

Supported Transports

STDIO

READMEArcade MCP Server

View source

<div align="center">

<img src="https://docs.arcade.dev/images/logo/arcade-logo.png" alt="Arcade" width="400">

</div>

<div align="center">

![License](https://github.com/ArcadeAI/arcade-mcp/blob/main/LICENSE)

![CI](https://github.com/ArcadeAI/arcade-mcp/actions?query=branch%3Amain)

![PyPI](https://pypi.org/project/arcade-mcp/)

![Python Version](https://pypi.org/project/arcade-mcp/)

</div>

Arcade MCP

Open-source Python framework for building MCP servers and tools.

DocumentationExamplesDiscord

What is arcade-mcp

arcade-mcp is the Python framework for building Model Context Protocol servers and the tools that run inside them. It powers the 7,500+ prebuilt tools across 81 MCP servers at Arcade.dev, and is open-sourced so you can build your own.

Use it when you need MCP tools that aren't already in the prebuilt catalog: internal APIs, custom OAuth providers, domain-specific integrations.

Highlights:

  • Decorator API covering the full MCP spec: tools, resources, prompts, sampling, elicitation, progress, logging.
  • Authorized tool calling. Declare requires_auth=GitHub(scopes=["repo"]) and Arcade handles OAuth, token refresh, and per-call scoping. The client and the LLM never see the token.
  • Vendor-neutral. Any MCP client, any LLM, any agent framework (LangChain, Mastra, Pydantic AI, CrewAI, Google ADK, OpenAI Agents).
  • arcade evals for testing tool-call accuracy against real LLMs.
  • arcade deploy for one-command hosting on Arcade Cloud.

Authorized tool calling

Tools can declare:

  1. Which OAuth scopes they need, and Arcade handles the rest: prompting the end user to authorize, storing and refreshing tokens, scoping them per call
  2. API keys or any other secrets, and Arcade hosts the secrets securely in an encrypted environment.

The secrets (OAuth tokens, API keys, etc) are securely injected by Arcade into your tool call at runtime, so that your tool can authorize requests to upstream APIs, for example. The client and the LLM never see the secret values.

A tool that reads the user's GitHub repos is one decorator away:

python
from arcade_mcp_server import MCPApp, Context
from arcade_mcp_server.auth import GitHub

app = MCPApp(name="gh", version="1.0.0")

@app.tool(requires_auth=GitHub(scopes=["repo"]))
async def list_my_repos(context: Context) -> list[str]:
    """List the authenticated user's GitHub repositories."""
    token = context.get_auth_token_or_empty()
    ...

When the tool is invoked through Arcade Cloud, the user is presented with a URL to complete the OAuth challenge in their browser. On success, the token is injected into context for that call. Subsequent calls reuse and refresh the token automatically.

22 helper classes ship with the framework for popular providers:

Asana, Atlassian, Attio, ClickUp, Discord, Dropbox, Figma, GitHub, Google, Hubspot, Linear, LinkedIn, Microsoft, Notion, PagerDuty, Reddit, Slack, Spotify, Twitch, X, Zoom.

For any other OAuth API, use the generic OAuth2(...) class and register your OAuth app in the Arcade Dashboard.

Quick Start

Install the CLI

bash
uv tool install arcade-mcp

Scaffold a new server

bash
arcade new my_server
cd my_server/src/my_server

The scaffold creates pyproject.toml, .env.example, and a server.py with example tools.

A minimal tool:

python
from typing import Annotated
from arcade_mcp_server import MCPApp

app = MCPApp(name="my_server", version="1.0.0")

@app.tool
def greet(name: Annotated[str, "Name to greet"]) -> str:
    """Greet a person by name."""
    return f"Hello, {name}!"

if __name__ == "__main__":
    app.run(transport="stdio")

Run

bash
uv run server.py             # stdio (default), for Claude Desktop and CLI tools
uv run server.py http        # HTTP+SSE, for Cursor and VS Code; docs at http://127.0.0.1:8000/docs

Configure your MCP client

bash
arcade configure claude                                 # Claude Desktop, stdio
arcade configure cursor --transport http --port 8080    # Cursor, local HTTP on :8080
arcade configure vscode --entrypoint my_server.py       # VS Code, stdio launching my_server.py

For more patterns (MCP resources, sampling, progress reporting, tool chaining, end-to-end agents, eval suites, Resource Server Auth), browse `examples/mcp_servers/`. Run arcade --help for the full CLI.

With Arcade Cloud

arcade login followed by arcade deploy packages your server, discovers and upserts required secrets, and polls until it's healthy on Arcade Cloud. From there, the Arcade Engine fulfills authorized tool calling flows for end users, and arcade server logs/list/status plus arcade dashboard provide observability and management.

Standalone is supported too. Run your server in any MCP client over stdio or HTTP. Supply your own access tokens for tools with requires_auth=..., and protect production HTTP endpoints with Resource Server Auth (OAuth 2.1 Bearer tokens validated against your IdP).

Install from Source

Requires Python 3.10+ and `uv`.

bash
git clone https://github.com/ArcadeAI/arcade-mcp.git
cd arcade-mcp
make install

See `CONTRIBUTING.md` for development workflow and `SECURITY.md` for vulnerability reporting.

Community

  • Discord: <https://discord.com/invite/GUZEMpEZ9p>
  • X: <https://x.com/TryArcade>
  • LinkedIn: <https://www.linkedin.com/company/arcade-mcp>
  • Issues: <https://github.com/ArcadeAI/arcade-mcp/issues>
  • Documentation: <https://docs.arcade.dev>

License

MIT. See `LICENSE`.

Embed Security Badge

Add this badge to your README or documentation

Arcade MCP Server MCPSafe Security
[![Arcade MCP Server MCPSafe Security](https://api.mcpsafe.org
/api/badge/arcadeai-arcade-mcp.svg)](https://mcpsafe.org/registry/arcadeai-arcade-mcp)
Need more customization options?Badge Documentation

Server Information

Source
GITHUB
Language
python
License
MIT
Transport
STDIO
Added
Aug 11, 2026
Updated
Sep 16, 2026