Back to Browse

PLwC Personal MCP Server

Developer ToolsUse Caution4.4MCP RegistryLocal
Free

Server data from the Official MCP Registry

Windows x64/Python 3.12 MCPB preview: governed local tools and persistent profiles.

About

Windows x64/Python 3.12 MCPB preview: governed local tools and persistent profiles.

Security Report

4.4
Use Caution4.4High Risk

PLwC Personal is a local MCP gateway with bounded workspace access, Docker-isolated sandbox execution with no network and no host-shell fallback, and a governed profile-change workflow. The visible code shows strong boundary design, but the server file is truncated, so the workspace, sandbox, and policy enforcement code could not be fully audited. Its broad permissions (file write, process spawn via Docker, network for the optional Chat Bridge and Qdrant model downloads) fit its stated purpose but still warrant user awareness. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity).

7 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

process_spawn

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mhoedt-ai-plwc-gateway": {
      "args": [
        "-y",
        "@plwc/chat-bridge-workspace"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

PLwC Personal 1.0.0

Controlled local access for AI assistants, persistent profiles and governed changes.

PLwC lets compatible AI assistants read and organise allowed local files, create and read documents, and run Python or Node.js in isolated Docker environments under locally configured rules. Persistent profiles retain preferences and working context across sessions and compatible clients. The Governor separates proposed lasting profile changes from their explicitly confirmed application.

PLwC provides the local gateway and tools; you choose the AI client and model. Requests and returned contents can still be processed by an external AI provider.

Downloads and documentation

PLwC Personal and its gateway use version 1.0.0. The browser extension, PLwC Personal Chat Bridge, uses version 2.0.0 for Chrome and Edge; its store publication is separate. The bridge protocol is 1.0.0.

What is included

  • A bilingual Windows installer with the gateway, configuration and selectable client integrations.
  • Bounded workspace file and directory operations.
  • DOCX, XLSX, PPTX, PDF and ZIP operations through the document worker.
  • Separate Docker runtimes for documents, Python and Node.js. Sandbox execution has no network access and no automatic host-shell fallback.
  • Local profiles, Compile, Reflection, memory and Governor Plan/Apply workflows.
  • A local Chat Bridge for ChatGPT in supported browsers; native STDIO integration for compatible MCP clients.

The gateway exposes exactly eight tools: plwc_status, plwc_describe, plwc_profile, plwc_reflection, plwc_governor, plwc_sandbox_run, plwc_workspace_operation and plwc_document_operation.

Installation and integrity

Use Windows 11 x64. Python is required for the gateway; Node.js is additionally required for the Chat Bridge. Docker Desktop with Linux containers and WSL 2 is required for document and sandbox operations. The installer checks prerequisites and asks before optional runtime downloads.

Without available Docker runtimes, profile and workspace functions remain usable in Safe Mode; document and sandbox operations are unavailable.

The official installer is PLwC-Setup-1.0.0-installer-r27.exe, SHA-256:

aa1650fd560b73d0920ce6a4f070f290602cafe271b35e6b6314fa3af25ffe23

The EXE has no Windows Authenticode signature (NotSigned). Its release manifest has an independently verified RSA signature. The release includes the signed manifest, the public trust anchor, the final runtime lock and SHA256SUMS.txt.

The unchanged V9 runtime digests are:

RuntimeGHCR digest
Document workersha256:cab60f93f65a1a5827b03757b59b8d026826bee0e4ca1e5a60d014d70d294064
Node.js runnersha256:d190b3e3f160be8f3aaf69d14b6b99f558fd66bff869d423c6e4aedc74cdd6f8
Python runnersha256:51d0bf8c0d6d1b4fc22a1f69d5b0ccd97369091f2654d17ce6d33b206f621a17

Sources, licenses and support

The release sources are bound to commit 0c1c367c00bb7f5bb265d129f4daa7b73167b313 and tag v1.0.0. Changes to this README do not alter that release tag or its runtime/installer artifacts.

Corresponding GPL/LGPL sources, image mapping and replacement instructions are provided alongside the binaries. Third-party components retain their own licenses and applicable modification and replacement rights.

PLwC-owned components use the PolyForm Internal Use License 1.0.0, with Personal Use Permission and Official Redistribution Permission. These permit the specified private/internal use and free sharing of complete, unmodified official releases. Modified distribution and commercial offerings require a separate agreement. Earlier lawfully published Apache 2.0 content retains its original rights; see licensing.

Known status inconsistency: successful Python and Node.js executions can report sandbox_ready: false. The agreed execution tests completed successfully; this display inconsistency is documented.

Contact: info@plwc.de. Voluntary support on Ko-fi.

Reviews

No reviews yet

Be the first to review this server!