ToonDeck

One deck for every agent — all your MCP tools, skills, models and API keys, configured once, running everywhere.

English | 简体中文

Status: pre-alpha. Works on your own machine; expect rough edges before a 1.0. Powered by mcptoon, which is pulled in automatically as a dependency.

Vault — keys in your OS keychain, never on disk	Skills — one folder, synced to every agent

Requirements

• Python 3.10 or newer
• Windows, macOS or Linux
• API keys live in your OS keychain (never in a plaintext file). On a headless Linux box you need a keychain service (GNOME Keyring / KWallet); without one, ToonDeck refuses to store a key rather than writing it to disk.

Install

From source — works today:

git clone https://github.com/activeing123/toondeck.git
cd toondeck
pip install .
toondeck          # starts the local console and opens your browser

From PyPI — not published yet, so this currently fails:

pip install toondeck   # coming soon

The web UI is shipped inside the package, so a source install needs no node, no pnpm, and no build step.

What you get

Development

# backend
python -m venv .venv && source .venv/bin/activate   # Windows: .venv\Scripts\activate
pip install -e ".[dev]"
pytest

# frontend (builds straight into src/toondeck/deck/api/webui, which is committed
# so installed copies carry their own UI — rebuild and commit together)
cd web && pnpm install && pnpm test && pnpm build

CI runs the backend and web suites on Linux plus a clean-room job that builds the wheel, installs it into a fresh virtualenv and proves the UI and the detection catalogs actually ship — the class of bug that local tests cannot see. Reproduce it locally before tagging:

python scripts/clean_room_check.py

Security

API keys never touch disk and never leave your machine — the full model and the private vulnerability reporting channel are in SECURITY.md.

Contributing

The short version: every fix ships with a gate, and the clean-room script is the boss. Details in CONTRIBUTING.md.

License: Apache-2.0