Stacklok
Open-source platform for running MCP servers securely in containers, led by ToolHive.
About
Stacklok is the company behind ToolHive, an open-source platform (Apache 2.0) for running Model Context Protocol servers securely. MCP servers connect AI clients like Cursor or Claude Code to outside tools, and ToolHive drops each server into its own container with minimal permissions, network filtering, secrets management, and audit logging instead of running it with the machine's own credentials.
The platform has four parts: a runtime for local or Kubernetes execution, a registry server for curating and signing approved servers, a gateway that collapses multiple backends behind one endpoint with SSO, and a desktop portal for one-click installs. Co-founded by Kubernetes co-creator Craig McLuckie, Stacklok positions ToolHive as the safe default for bringing MCP servers into production development workflows.
What it can do
- Containerized execution of any MCP server with isolation
- Curated registry with signed servers and provenance checks
- Network filtering and per-request identity enforcement
- Virtual MCP gateway with OIDC/OAuth single sign-on
- Kubernetes operator for production deployments
Setup
Install ToolHive via the CLI or desktop app, pull a verified MCP server from the registry, and run it containerized with thv run.
Prerequisites
Docker or Podman for local runs, or a Kubernetes cluster for the operator-based deployment.
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 112; Trending score 82/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.