ToolHive addresses a problem that came with MCP's rapid adoption: running MCP servers safely at scale, since each one is effectively a piece of third-party code with access to tools and potentially sensitive context. It runs every MCP server in an isolated container with least-privilege permissions, enforces access policy on a per-request basis, and manages secrets with encryption, aiming to make an MCP server secure by default rather than relying on whoever wrote it to have gotten security right.
It offers an opinionated registry of trusted MCP servers already packaged in OCI containers, ready to deploy through Docker locally, a desktop UI, CLI workflows, or a Kubernetes operator for production-scale use. It automatically configures compatible AI assistants like Copilot and Cursor to use the servers it's running, abstracting away the networking and proxy details that would otherwise need manual setup.
Built by Stacklok, an open-source security company, ToolHive is aimed at platform and security teams trying to roll out MCP servers across an organization without each team reinventing isolation and access control on their own.