mcpgawk — see every MCP server your agents can reach

Your agents call MCP servers you have never inspected. This extension shows every server configured across your AI tools, grouped by the tool it lives in, what each one can reach, and which ones need attention. Drift against an approved baseline is the CLI and the panel, not this view.

Local-first. The extension runs the mcpgawk CLI on your machine and renders what it returns. Nothing about your servers, tools or credentials is uploaded anywhere.

The engine in action: a server is measured, approved, then rug-pulls — mcpgawk catches the drift and the guard blocks the tool that appeared afterwards. All local, nothing uploaded.

Every server your agents can reach, grouped by the tool it lives in. Servers shown are the ones mcpgawk demo creates — your own fleet never leaves your machine.

Requirements

The engine is a separate CLI:

pipx install mcpgawk      # or: pip install mcpgawk

If it lives somewhere unusual (a virtualenv, a pyenv shim), set mcpgawk.path in settings.

What you get

• A panel grouped by tool — Claude Code, Cursor, Codex, Claude Desktop (including extensions), Kiro, Gemini CLI. A server configured in two tools is scanned once and listed under both, because removing it from one leaves it running in the other.
• Honest states — REVIEW / INCOMPLETE / CLEAN for servers we measured; AUTH, UNREACHABLE, SKIPPED for ones we could not; NOT-SCANNABLE for account-hosted connectors that run outside your machine and cannot be inspected at all. Nothing we failed to see is hidden.
• Sign in from the list — one click per server that needs credentials; the sign-in runs in a visible terminal and opens your system browser.
• Local servers are never launched silently. Scanning a stdio server runs its code, so it happens only when you explicitly ask, with the consequence stated.

Which editors

One build covers the VS Code family, which all share this extension API: VS Code · Cursor · Windsurf · Kiro · Antigravity.

Not covered: JetBrains IDEs (IntelliJ Platform, a separate plugin ecosystem) and Zed (Rust/WASM extensions). Those need their own builds — the CLI works fine in all of them today.

One source of truth

The extension does no scanning of its own. It calls the mcpgawk CLI and renders exactly what the engine returns — the same rows the terminal prints — so the view can never disagree with the tool.