MCPLow riskUnclaimed

MCP Sidecar

Cross-platform MCP server for managing long-lived background processes from any MCP client

lsequeiraalsequeiraa/mcp-sidecarUpdated Jun 2, 2026

server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.lsequeiraa/mcp-sidecar",
  "description": "Cross-platform MCP server for managing long-lived background processes from any MCP client",
  "title": "MCP Sidecar",
  "repository": {
    "url": "https://github.com/lsequeiraa/mcp-sidecar",
    "source": "github"
  },
  "version": "0.3.2",
  "packages": [
    {
      "registryType": "npm",
      "identifier": "mcp-sidecar",
      "version": "0.3.2",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "Maximum number of concurrent managed processes (default: 10)",
          "format": "string",
          "name": "SIDECAR_MAX_PROCESSES"
        },
        {
          "description": "Output buffer size per stream in bytes (default: 1048576)",
          "format": "string",
          "name": "SIDECAR_BUFFER_SIZE"
        },
        {
          "description": "Milliseconds to wait between graceful and forced termination (default: 5000)",
          "format": "string",
          "name": "SIDECAR_KILL_TIMEOUT"
        },
        {
          "description": "Seconds before exited processes are auto-removed. 0 disables cleanup (default: 1800)",
          "format": "string",
          "name": "SIDECAR_CLEANUP_AFTER"
        },
        {
          "description": "Global cap on bytes returned by the output tool. 0 means unlimited (default: 0)",
          "format": "string",
          "name": "SIDECAR_MAX_OUTPUT_SIZE"
        },
        {
          "description": "Comma-separated allowlist of executable names. When set, enables security mode with direct exec (no shell). Unset means security disabled.",
          "format": "string",
          "name": "SIDECAR_ALLOWED_EXECUTABLES"
        },
        {
          "description": "Comma-separated regex patterns to reject in commands. Only applies when security is enabled.",
          "format": "string",
          "name": "SIDECAR_BLOCKED_PATTERNS"
        },
        {
          "description": "Audit log destination. 'true' writes to cwd, 'temp' writes to OS temp dir, or a directory path. Unset disables audit logging.",
          "format": "string",
          "name": "SIDECAR_AUDIT_LOG"
        }
      ]
    }
  ]
}

Permissions

DeclaredDetected
Runs code—node
Installs—npm:mcp-sidecar@0.3.2
Runs install scripts—None
NetworkNoneNone
Needs credentialsNoneNone
Outside the workspace—None
Agent tools—None

Checks

Low risk · Nothing worth a warning was found.

Not reviewed by a person · Checked by rules; the model review is not switched on yet.

Versions

  1. #10.3.2latestOct 7, 2026