ToonDeck

One deck for every agent — all your MCP tools, skills, models and API keys, configured once, running everywhere.

English | 简体中文

Status: pre-alpha. Works on your own machine; expect rough edges before a 1.0. Powered by mcptoon, which is pulled in automatically as a dependency.

Vault — keys in your OS keychain, never on disk	Skills — one folder, synced to every agent

Requirements

• Python 3.10 or newer
• Windows (first-class — the console spawns agents in real console windows), macOS and Linux work too
• API keys live in your OS keychain (never in a plaintext file). On a headless Linux box you need a keychain service (GNOME Keyring / KWallet); without one, ToonDeck refuses to store a key rather than writing it to disk.

Install

pip install toondeck          # the web UI ships inside the wheel — no node, no build
toondeck                      # starts the local console and opens your browser

Or from source:

git clone https://github.com/activeing123/toondeck.git
cd toondeck
pip install .

What you get

Development

# backend
python -m venv .venv && source .venv/bin/activate   # Windows: .venv\Scripts\activate
pip install -e ".[dev]"
pytest

# frontend (builds straight into src/toondeck/deck/api/webui, which is committed
# so installed copies carry their own UI — rebuild and commit together)
cd web && pnpm install && pnpm test && pnpm build

CI runs the backend and web suites on Linux plus a clean-room job that builds the wheel, installs it into a fresh virtualenv and proves the UI and the detection catalogs actually ship — the class of bug that local tests cannot see. Reproduce it locally before tagging:

python scripts/clean_room_check.py

Security

API keys never touch disk and never leave your machine — the full model and the private vulnerability reporting channel are in SECURITY.md.

Contributing

The short version: every fix ships with a gate, and the clean-room script is the boss. Details in CONTRIBUTING.md.

License: Apache-2.0