pctx MCP — Сценарии использования, Установка & Живое демо

Зачем использовать

Ключевые функции

Code Mode: one LLM code block can chain many MCP tool calls in one turn
Deno sandbox: no FS, no env, allowlisted network only
Aggregates multiple upstream MCP servers behind one pctx
Credential-proofing: LLM never sees keys — pctx injects them
Install via Homebrew, npm -g, or curl-pipe script

Живое демо

Как выглядит на практике

pctx.replay ▶ готово

0/0

Установка

Выберите клиент

~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "pctx": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/portofcontext/pctx"
      ],
      "_inferred": true
    }
  }
}

Откройте Claude Desktop → Settings → Developer → Edit Config. Перезапустите после сохранения.

~/.cursor/mcp.json · .cursor/mcp.json

{
  "mcpServers": {
    "pctx": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/portofcontext/pctx"
      ],
      "_inferred": true
    }
  }
}

Cursor использует ту же схему mcpServers, что и Claude Desktop. Конфиг проекта приоритетнее глобального.

VS Code → Cline → MCP Servers → Edit

{
  "mcpServers": {
    "pctx": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/portofcontext/pctx"
      ],
      "_inferred": true
    }
  }
}

Щёлкните значок MCP Servers на боковой панели Cline, затем "Edit Configuration".

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "pctx": {
      "command": "TODO",
      "args": [
        "See README: https://github.com/portofcontext/pctx"
      ],
      "_inferred": true
    }
  }
}

Тот же формат, что и Claude Desktop. Перезапустите Windsurf для применения.

~/.continue/config.json

{
  "mcpServers": [
    {
      "name": "pctx",
      "command": "TODO",
      "args": [
        "See README: https://github.com/portofcontext/pctx"
      ]
    }
  ]
}

Continue использует массив объектов серверов, а не map.

~/.config/zed/settings.json

{
  "context_servers": {
    "pctx": {
      "command": {
        "path": "TODO",
        "args": [
          "See README: https://github.com/portofcontext/pctx"
        ]
      }
    }
  }
}

Добавьте в context_servers. Zed перезагружается автоматически.

claude mcp add pctx -- TODO 'See README: https://github.com/portofcontext/pctx'

Однострочная команда. Проверить: claude mcp list. Удалить: claude mcp remove.

Сценарии использования

Реальные сценарии: pctx

Run a chain of 20 tool calls as one code block

👤 Agent builders whose token bills spike on long sequential flows ⏱ ~20 min advanced

Когда использовать: A task needs many tool calls (fetch N issues, enrich each, post summary).

Предварительные требования

pctx installed and configured — brew install portofcontext/tap/pctx; pctx config add <upstream-mcp>

Поток

Register upstreams with credentials

pctx config add github --env GITHUB_TOKEN=... and add sentry --env SENTRY_TOKEN=....✓ Скопировано

→ Upstreams listed
Ask agent to write Code Mode

In pctx Code Mode, write a function that fetches the 10 newest Sentry issues, for each finds the releasing commit via github, and returns a summary array.✓ Скопировано

→ Code block + single execution result
Inspect the result

Summarize the array in English and flag any issue whose releasing commit was by a specific author.✓ Скопировано

→ Final answer grounded in the data

Итог: 10x fewer tool-call round-trips, major token savings, same result.

Подводные камни

Sandboxed code errors are opaque if you don't surface stderr — Wrap the code in try/catch and print caught errors so the LLM can self-correct
Network allowlist too tight — legitimate calls blocked — Start broad, narrow based on actual host usage from logs

Сочетать с: github · sentry

Isolate credentials from the LLM

👤 Security-conscious teams adopting MCPs ⏱ ~15 min intermediate

Когда использовать: Your threat model says 'LLM must never see the token in any form'.

Поток

Store creds in pctx

Add a keychain-backed credential to pctx for github.✓ Скопировано

→ Credential stored, not visible to callers
Verify from the other side

Ask the LLM to 'print the GitHub token' — confirm it cannot.✓ Скопировано

→ LLM has no way to access the secret

Итог: A reproducible answer to 'can the LLM exfiltrate our tokens?' — no.

Aggregate many MCPs into one sandboxed code interface

👤 Teams wanting a single safe surface ⏱ ~25 min advanced

Когда использовать: You want Code Mode semantics across github, postgres, filesystem in one place.

Поток

Register each

Add github, postgres (read-only), and filesystem (scoped to /data) to pctx.✓ Скопировано

→ All three callable from code
Write a cross-MCP job

Write pctx code that reads a SQL query result and writes CSV to /data/out.csv, then creates a GitHub gist with that CSV.✓ Скопировано

→ Single execution, three upstreams used

Итог: A unified, sandboxed execution plane for mixed-upstream workflows.

Сочетать с: github · postgres · filesystem

Комбинации

Сочетайте с другими MCP — эффект x10

pctx + github + sentry

Cross-reference Sentry issues with GitHub commits in one sandboxed code block

Via pctx Code Mode: for every new Sentry issue, find the GitHub commit that introduced it and return a table.✓ Скопировано

pctx + postgres

Query + transform + export in one sandbox

pctx code that runs a Postgres read, pivots the result in JS, and writes /data/report.json.✓ Скопировано

Инструменты

Что предоставляет этот MCP

Инструмент	Входные данные	Когда вызывать	Стоимость
execute_code	code: str (JavaScript, access to injected MCP SDK)	Anytime the task needs >2 tool calls that compose	upstream tool calls inside the code
list_upstream_tools	(none)	Agent discovery — what's available to call from code	free

Стоимость и лимиты

Во что обходится

Квота API: No pctx quota; upstream calls inside code incur their own
Токенов на вызов: Code Mode is far cheaper token-wise than many sequential tool calls
Деньги: Free, open source
Совет: For tasks over 5 tool calls, Code Mode typically saves 50%+ tokens vs sequential calling.

Безопасность

Права, секреты, радиус поражения

Хранение учётных данных: Env vars, OS keychain, or external command — LLM never sees credentials

Исходящий трафик: Only to hosts explicitly allowlisted per upstream

Никогда не давайте: Allowlist the open internet in the sandbox — pin to specific hosts

Review what upstream tools the LLM-generated code calls — sandbox is network-scoped, not semantic.
Deno sandbox is strong but not infinite — treat it as defense in depth, not the only control.

Устранение неполадок

Частые ошибки и исправления

Network denied in sandbox

Add the host to the upstream's allowlist in pctx config.

Проверить: pctx config show

Credential not injected

Credential name mismatch; pctx logs the resolved key on startup.

Проверить: pctx run --debug

Code Mode returns a vague 'sandbox violation'

Enable verbose logs; most violations are env or FS access attempts the LLM shouldn't make.

Проверить: pctx logs --tail

Альтернативы

pctx в сравнении

Альтернатива	Когда использовать	Компромисс
proxy-2 / 1mcp-agent	You want aggregation but not Code Mode / sandboxing	LLM calls each tool separately; can see whatever the MCP returns
Bare execution via shell MCP	You want code execution but don't need MCP proxying	No credential isolation, no allowlist

Ещё

Ресурсы

📖 Читать официальный README на GitHub

🐙 Открытые задачи

🔍 Все 400+ MCP-серверов и Skills