Commands MCP Server
by bytedanceio.github.bytedance/mcp-server-commandsv1.0.0
An MCP server to run arbitrary commands
context tax
pending
security
100/100
cold start
pending
freshness
Active10d ago
Our reading of Commands, from the data
Commands is an MCP server from bytedance, listed in the official MCP Registry.
We haven't measured its tool list yet, so its token cost is unknown.
Maintenance is active: the last public signal was 10 days ago (2026-10-09).
It runs either locally over stdio or as a hosted endpoint.
Install Commands MCP server
Install in Claude Code
claude mcp add commands -- npx -y @agent-infra/mcp-server-commandsInstall in Cursor
{
"mcpServers": {
"commands": {
"command": "npx",
"args": [
"-y",
"@agent-infra/mcp-server-commands"
]
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"commands": {
"command": "npx",
"args": [
"-y",
"@agent-infra/mcp-server-commands"
]
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"commands": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@agent-infra/mcp-server-commands"
]
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"commands": {
"command": "npx",
"args": [
"-y",
"@agent-infra/mcp-server-commands"
]
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Security signals
100/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.
Deductions
No findings from the checks that ran.
Checks
- ✓Repository hygiene (archived, activity, license, security policy)
- ○Package metadata (install scripts, provenance) — pending
- ○Tool descriptions (prompt-injection and hidden-text heuristics) — pending
- ○Source scan (secrets, CVEs, risky code) by vectra-guard — pending
Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules
Freshness
Active — last maintenance signal 10d ago. The newest of the signals below sets the band.
Last commit (default branch)
2026-10-09 · 10d ago · GitHub
Latest release
2026-10-08 · 10d ago · GitHub · v0.3.1
Package published
no data · npm/PyPI
Registry entry updated
2025-09-09 · 14mo ago · official registry · v1.0.0
FAQ
›How do I install the Commands MCP server in Claude Code?
Run: claude mcp add commands -- npx -y @agent-infra/mcp-server-commands. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does Commands require an API key?
No required environment variables are declared in its published metadata.
›Can I use Commands as a remote (hosted) MCP server?
Yes — it offers both a hosted endpoint and a local stdio package.
›Is Commands in the official MCP registry?
Yes, as io.github.bytedance/mcp-server-commands.
Sources and method
- Official MCP Registry entry
- updated 2025-09-09
- GitHub repository
- fetched 2026-10-19
- Package registry (npm / PyPI)
- listed
- Security signals, computed by us
- 2026-10-19
- Last checked against all sources
- 2026-10-19
The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.