Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 0
- 4 2
- 3 1
- 2 0
- 1 2
Trust in production
- Trust it - 0%
- With caveats - 40%
- Wouldn't - 60%
40% would recommend this server
How reviewers scored it
- Setup & docs 2.6
- Auth experience 2.4
- Reliability 2.4
- Maintainer responsiveness 4.0
Why it got a C
A community MCP server for building and testing Tauri v2 apps (MIT, TypeScript server on npm as @hypothesi/tauri-mcp-server, Rust plugin tauri-plugin-mcp-bridge on crates.io, about 330 GitHub stars, not made by the Tauri project). The server talks stdio to your AI client and a WebSocket to the plugin inside your running app, with 21 tools for screenshots, clicks, typing, DOM snapshots, logs, window control, running JavaScript in the webview and calling Tauri IPC commands. It also works with iOS and Android builds on the same network. Register the plugin only in debug builds, as the README shows, so it never ships in a release. Biggest deduction: the plugin listens on every network interface by default with no login, so anyone on your network can drive the app and run code in it; set bind_address to 127.0.0.1 unless you test on a phone.
How to connect
npx @hypothesi/tauri-mcp-server, plus the tauri-plugin-mcp-bridge crate registered in your app (the README registers it only in debug builds)Is MCP Server Tauri (hypothesi/mcp-server-tauri) safe?
Is MCP Server Tauri (hypothesi/mcp-server-tauri) safe to use?
MCP Server Tauri (hypothesi/mcp-server-tauri) grades C (usable with care). There is no login: anything that can start or reach it gets its full access. It can run model-controlled code or uses a plaintext remote connection, so run it isolated with no credentials.
Does MCP Server Tauri (hypothesi/mcp-server-tauri) have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does MCP Server Tauri (hypothesi/mcp-server-tauri) support authentication?
No. It has no login of its own, so limit who and what can start it.
Alternatives in Developer Tools
- A Atlassian Rovo MCP ServerOfficial hosted Atlassian server for Jira, Confluence, Jira Service Management, Compass, Bitbucket, Loom, Goals, Projects, and Teams, with OAuth 2.1 sign-in.
- A Buildkite MCP ServerOfficial Buildkite server for pipelines, builds, jobs, logs, annotations, and Test Engine data, hosted or local.
- A Dynatrace Remote MCP ServerDynatrace's hosted MCP server, running inside your Dynatrace SaaS environment, to run and explain DQL, look into problems, vulnerabilities and Kubernetes events, and forecast time series.
- A GitHub MCP ServerOfficial GitHub server for repos, issues, pull requests, Actions, and code security, hosted or local.
- A GitLab MCP ServerGitLab's built-in MCP server for projects, merge requests, work items, code, and CI pipelines, on GitLab.com or your own instance.
Embed this badge
[](https://trustedmcp.io/servers/tauri-mcp-server)<a href="https://trustedmcp.io/servers/tauri-mcp-server"><img src="https://trustedmcp.io/badge/tauri-mcp-server.svg" alt="TrustedMCP grade C" height="80"></a>Community reviews
Would not run this unattended
Ran into problems pretty quickly. Filed an issue and got a reply within two days. Not something I would put in production yet.
Used for Internal developer assistant
- Setup & docs 1/5
- Auth experience 2/5
- Reliability 1/5
- Maintainer responsiveness 4/5
Went back to calling the API directly
I wanted to like this one. There is no auth layer, so whatever can reach it can use it. I keep it local only. Local stdio process, easy to start and stop from the client. Keeping it to local experiments for now.
Used for Code review summaries for pull requests
- Setup & docs 1/5
- Auth experience 2/5
- Reliability 1/5
- Maintainer responsiveness 3/5
Solid and well behaved
I use this almost daily. You can tell it is actively maintained, the rough edges keep getting fixed. There is no auth layer, so whatever can reach it can use it. I keep it local only.
Used for Letting a coding agent open and triage issues
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Promising, a bit raw
Works well enough for what I need. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. It is community maintained, so I pin the version and read the changelog before upgrading. Runs locally over stdio, so startup is instant and nothing leaves my machine unless a tool calls out. I will check back in a few releases.
Used for Looking up Tauri (hypothesi/--tauri) data without leaving the editor
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 5/5
Quietly reliable
Tried it on a side project first, then rolled it out at work. Nothing stops a misbehaving agent from using every tool it exposes, so I trimmed the tool list. Recommended, with sensible guardrails.
Used for Automating release notes
- Setup & docs 3/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.