Skip to main content
Yanked

This release has been yanked by its maintainers, and will be ignored by installers, except when explicitly specified.
Reason given by maintainers: end of life

zeughaus-mcp

MCP Server - Agentic Workbench backed by Nixery.

Execute commands in ephemeral containers with any combination of Nix packages.

Installation

Docker (recommended)

Docker is the recommended installation method because it provides workspace isolation - the MCP server itself runs in a container with access only to your specified workspace directory.

docker run --rm -i \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v /path/to/workspace:/workspace \
  -e NIXERY_REGISTRY_URL=nixery.zeughaus.dev \
  -e HOST_WORKSPACE_ROOT=/path/to/workspace \
  ghcr.io/gtarkin/zeughaus_mcp:latest

uvx (alternative)

Note: When running via uvx, the MCP server has full access to the host system. Use Docker for better isolation.

uvx zeughaus-mcp

Configuration

Environment variables:

Variable Required Default Description
NIXERY_REGISTRY_URL Yes - Nixery registry URL (see below)
HOST_WORKSPACE_ROOT Yes - Workspace path to mount into containers
DOCKER_NETWORK_MODE No host Docker network mode
CONTAINER_TIMEOUT_SECONDS No 300 Container execution timeout

Nixery Registries

Nixery is a Docker-compatible registry that builds container images on-the-fly from Nix packages.

Available Registries

Registry Channel Description
nixery.zeughaus.dev nixos-25.11 Self-hosted instance for zeughaus-mcp (recommended)
nixery.dev nixos-unstable Public Nixery instance by Google

nixery.zeughaus.dev (Recommended)

The default registry for zeughaus-mcp. This is a self-hosted Nixery instance with:

nixery.dev (Alternative)

The public Nixery instance maintained by Google. Use this if you prefer:

  • Nix Channel: nixos-unstable (latest packages)
  • No dependency on third-party infrastructure

To use the public registry, set:

NIXERY_REGISTRY_URL=nixery.dev

MCP Client Configuration

Claude Desktop (Docker - recommended)

{
  "mcpServers": {
    "zeughaus": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "-v", "/var/run/docker.sock:/var/run/docker.sock",
        "-v", "/path/to/workspace:/workspace",
        "-e", "NIXERY_REGISTRY_URL=nixery.zeughaus.dev",
        "-e", "HOST_WORKSPACE_ROOT=/path/to/workspace",
        "ghcr.io/gtarkin/zeughaus_mcp:latest"
      ]
    }
  }
}

Claude Desktop (uvx)

{
  "mcpServers": {
    "zeughaus": {
      "command": "uvx",
      "args": ["zeughaus-mcp"],
      "env": {
        "NIXERY_REGISTRY_URL": "nixery.zeughaus.dev",
        "HOST_WORKSPACE_ROOT": "/path/to/workspace"
      }
    }
  }
}

License

MIT

Metadata

Release files for zeughaus-mcp 0.1.4

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for zeughaus-mcp 0.1.4
File Size Uploaded Provenance
zeughaus_mcp-0.1.4.tar.gz 6.1 kB With provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for zeughaus-mcp 0.1.4
File Interpreter ABI Platform
zeughaus_mcp-0.1.4-py3-none-any.whl Python 3 none any Details

Total release size: 11.3 kB

Release files / zeughaus_mcp-0.1.4.tar.gz

Download URL zeughaus_mcp-0.1.4.tar.gz
Size 6.1 kB
Tags Source
SHA-256 checksum
How to use checksums
1693d2c7d5689f3a59a8886fc58f68b233e37196dc83aabd01c46eb85da439e3
BLAKE2b-256 checksum
How to use checksums
8f8293d5f8c3aeee01b01ba74ef550d1f24e881d120089b12df742fd0c8b9796
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.7

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Jan 30, 2026.

Transparency log

Release files / zeughaus_mcp-0.1.4-py3-none-any.whl

Download URL zeughaus_mcp-0.1.4-py3-none-any.whl
Size 5.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
3940f0c9c6f9921a5e29ccca23107279aeb1b8f6038c314436801bf18a7f9f73
BLAKE2b-256 checksum
How to use checksums
6f979e483359ca9f7274f456c40e8c92492d1ce3331d1061fea2ec144ae9f9df
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.7

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Jan 30, 2026.

Transparency log

Security for zeughaus-mcp 0.1.4

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for zeughaus_mcp-0.1.4.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Jan 30, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.1.4 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page