Back to Browse

Worktree Orbit MCP Server

Developer ToolsModerate7.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Aggregate local Git worktree topology without exposing repository content. Tools include inspect...

About

Aggregate local Git worktree topology without exposing repository content. Tools include inspect...

Security Report

7.2
Moderate7.2Low Risk

Worktree Orbit is a well-designed, security-conscious MCP server for inspecting local Git repository worktree topology. The codebase demonstrates strong path confinement controls, read-only operations, and deliberate data minimization (no paths, branch names, or content leaked). Minor code quality observations exist but do not represent security vulnerabilities. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

6 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

file_stat

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mrfentmen-worktree-orbit-mcp": {
      "args": [
        "-y",
        "worktree-orbit-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

worktree-orbit-mcp

Worktree Orbit is a local MCP for developers who keep several Git worktrees alive at once. It answers whether a repository has parallel worktrees, whether they are clean, and whether detached, locked, or prunable worktrees need attention.

Tool

  • inspect_worktree_topology: returns aggregate worktree count, primary and linked counts, clean or dirty counts, detached state, lock state, prunable state, and a coarse topology hint.

It never returns paths, branch names, hashes, remotes, lock reasons, subjects, authors, or file contents.

Safety

  • Local Git commands only. No network access is used.
  • The selected repository must stay inside WORKTREE_ORBIT_ROOT.
  • Commands are read-only: the server does not add, remove, move, lock, unlock, reset, prune, or modify worktrees.
  • Worktree status checks are bounded and time limited.
  • Results are aggregate signals, not a replacement for inspecting a specific worktree before deleting it.

Run

npm install
npm run build
node dist/index.js

Reviews

No reviews yet

Be the first to review this server!