MCPLow riskUnclaimed
MCP Sidecar
Cross-platform MCP server for managing long-lived background processes from any MCP client
lsequeiraalsequeiraa/mcp-sidecar
server.json
{
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"name": "io.github.lsequeiraa/mcp-sidecar",
"description": "Cross-platform MCP server for managing long-lived background processes from any MCP client",
"title": "MCP Sidecar",
"repository": {
"url": "https://github.com/lsequeiraa/mcp-sidecar",
"source": "github"
},
"version": "0.3.2",
"packages": [
{
"registryType": "npm",
"identifier": "mcp-sidecar",
"version": "0.3.2",
"transport": {
"type": "stdio"
},
"environmentVariables": [
{
"description": "Maximum number of concurrent managed processes (default: 10)",
"format": "string",
"name": "SIDECAR_MAX_PROCESSES"
},
{
"description": "Output buffer size per stream in bytes (default: 1048576)",
"format": "string",
"name": "SIDECAR_BUFFER_SIZE"
},
{
"description": "Milliseconds to wait between graceful and forced termination (default: 5000)",
"format": "string",
"name": "SIDECAR_KILL_TIMEOUT"
},
{
"description": "Seconds before exited processes are auto-removed. 0 disables cleanup (default: 1800)",
"format": "string",
"name": "SIDECAR_CLEANUP_AFTER"
},
{
"description": "Global cap on bytes returned by the output tool. 0 means unlimited (default: 0)",
"format": "string",
"name": "SIDECAR_MAX_OUTPUT_SIZE"
},
{
"description": "Comma-separated allowlist of executable names. When set, enables security mode with direct exec (no shell). Unset means security disabled.",
"format": "string",
"name": "SIDECAR_ALLOWED_EXECUTABLES"
},
{
"description": "Comma-separated regex patterns to reject in commands. Only applies when security is enabled.",
"format": "string",
"name": "SIDECAR_BLOCKED_PATTERNS"
},
{
"description": "Audit log destination. 'true' writes to cwd, 'temp' writes to OS temp dir, or a directory path. Unset disables audit logging.",
"format": "string",
"name": "SIDECAR_AUDIT_LOG"
}
]
}
]
}Permissions
DeclaredDetected
Runs code—
nodeInstalls—
npm:mcp-sidecar@0.3.2Runs install scripts—None
NetworkNoneNone
Needs credentialsNoneNone
Outside the workspace—None
Agent tools—None
Checks
Low risk · Nothing worth a warning was found.
Not reviewed by a person · Checked by rules; the model review is not switched on yet.
Versions
- #10.3.2latestOct 7, 2026
MCP SidecarOpen in Codeg