This release has been yanked by its maintainers, and will be ignored by installers, except when explicitly specified.
Reason given by maintainers: end of life
zeughaus-mcp
MCP Server - Agentic Workbench backed by Nixery.
Execute commands in ephemeral containers with any combination of Nix packages.
Installation
Docker (recommended)
Docker is the recommended installation method because it provides workspace isolation - the MCP server itself runs in a container with access only to your specified workspace directory.
docker run --rm -i \
-v /var/run/docker.sock:/var/run/docker.sock \
-v /path/to/workspace:/workspace \
-e NIXERY_REGISTRY_URL=nixery.zeughaus.dev \
-e HOST_WORKSPACE_ROOT=/path/to/workspace \
ghcr.io/gtarkin/zeughaus_mcp:latest
uvx (alternative)
Note: When running via uvx, the MCP server has full access to the host system. Use Docker for better isolation.
uvx zeughaus-mcp
Configuration
Environment variables:
| Variable | Required | Default | Description |
|---|---|---|---|
NIXERY_REGISTRY_URL |
Yes | - | Nixery registry URL (see below) |
HOST_WORKSPACE_ROOT |
Yes | - | Workspace path to mount into containers |
DOCKER_NETWORK_MODE |
No | host |
Docker network mode |
CONTAINER_TIMEOUT_SECONDS |
No | 300 |
Container execution timeout |
Nixery Registries
Nixery is a Docker-compatible registry that builds container images on-the-fly from Nix packages.
Available Registries
| Registry | Channel | Description |
|---|---|---|
nixery.zeughaus.dev |
nixos-25.11 | Self-hosted instance for zeughaus-mcp (recommended) |
nixery.dev |
nixos-unstable | Public Nixery instance by Google |
nixery.zeughaus.dev (Recommended)
The default registry for zeughaus-mcp. This is a self-hosted Nixery instance with:
- Nix Channel:
nixos-25.11(stable packages) - Source: github.com/NixOS/nixpkgs
- Build timeout: 600 seconds
nixery.dev (Alternative)
The public Nixery instance maintained by Google. Use this if you prefer:
- Nix Channel:
nixos-unstable(latest packages) - No dependency on third-party infrastructure
To use the public registry, set:
NIXERY_REGISTRY_URL=nixery.dev
MCP Client Configuration
Claude Desktop (Docker - recommended)
{
"mcpServers": {
"zeughaus": {
"command": "docker",
"args": [
"run", "--rm", "-i",
"-v", "/var/run/docker.sock:/var/run/docker.sock",
"-v", "/path/to/workspace:/workspace",
"-e", "NIXERY_REGISTRY_URL=nixery.zeughaus.dev",
"-e", "HOST_WORKSPACE_ROOT=/path/to/workspace",
"ghcr.io/gtarkin/zeughaus_mcp:latest"
]
}
}
}
Claude Desktop (uvx)
{
"mcpServers": {
"zeughaus": {
"command": "uvx",
"args": ["zeughaus-mcp"],
"env": {
"NIXERY_REGISTRY_URL": "nixery.zeughaus.dev",
"HOST_WORKSPACE_ROOT": "/path/to/workspace"
}
}
}
}
License
MIT
Metadata
Release files for zeughaus-mcp 0.1.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| zeughaus_mcp-0.1.4.tar.gz | 6.1 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| zeughaus_mcp-0.1.4-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 11.3 kB
Release files / zeughaus_mcp-0.1.4.tar.gz
| Download URL | zeughaus_mcp-0.1.4.tar.gz |
|---|---|
| Size | 6.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
1693d2c7d5689f3a59a8886fc58f68b233e37196dc83aabd01c46eb85da439e3
|
|
BLAKE2b-256 checksum How to use checksums |
8f8293d5f8c3aeee01b01ba74ef550d1f24e881d120089b12df742fd0c8b9796
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.7
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jan 30, 2026.
Transparency logRelease files / zeughaus_mcp-0.1.4-py3-none-any.whl
| Download URL | zeughaus_mcp-0.1.4-py3-none-any.whl |
|---|---|
| Size | 5.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
3940f0c9c6f9921a5e29ccca23107279aeb1b8f6038c314436801bf18a7f9f73
|
|
BLAKE2b-256 checksum How to use checksums |
6f979e483359ca9f7274f456c40e8c92492d1ce3331d1061fea2ec144ae9f9df
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.7
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jan 30, 2026.
Transparency logSecurity for zeughaus-mcp 0.1.4
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for zeughaus_mcp-0.1.4.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jan 30, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.