How do I install Agz Rust?

Agz Rust is a local plugin. Install it using the provided package and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Agz Rust safe to use?

Yes. Agz Rust passed MCP Marketplace's automated security scan with a score of 10/10 (low risk). Every server on MCP Marketplace is security-scanned before it's listed; see the full security report on this page for the findings and permissions.

What AI apps work with Agz Rust?

Agz Rust uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Agz Rust MCP Server

by Ugur Murat Alt

Developer ToolsLow Risk10.0MCP RegistryLocal

Free

Server data from the Official MCP Registry

Bounded, source-write-free Rust correctness tools grounded in Cargo and rustc output.

About

Bounded, source-write-free Rust correctness tools grounded in Cargo and rustc output.

Security Report

10.0

Low Risk10.0Low Risk

Valid MCP server (2 strong, 1 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry.

14 files analyzed · No issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

Documentation

View on GitHub

From the project's GitHub README.

AGZ Rust MCP

English | Türkçe

An AGZ Yazılım product. agz-rust-mcp is a standalone stdio MCP server for bounded Rust correctness grounded in Cargo and rustc. It runs bounded Cargo validation, audits source, resolves exact-version crate documentation, provides Rust Analyzer navigation, and returns write-free rename/refactor packages.

Install

# installer script (Linux x86_64): download install.sh and SHA256SUMS from the
# latest release, verify the script, then run it
bash install.sh

# crates.io (requires Rust 1.88.0 or newer)
cargo install agz-rust-mcp --locked
agz-rust-mcp --version

Prebuilt .tar.gz archives with .sha256 files are available for Linux x86_64, macOS arm64, and Windows x86_64. Releases up to 0.2.0 use the legacy agz-rust-coder-* asset names; from 0.3.0 onward the names are agz-rust-mcp-*.

Step-by-step instructions, per-OS notes, checksum verification, and troubleshooting: docs/install.md · Türkçe.

MCP Client Setup

The current source also bundles four offline skills: agz-rust-workflow, agz-rust-repair, agz-rust-refactor, and agz-rust-performance. One executable serves the tools and their workflows through MCP prompts/resources; a second MCP is unnecessary. Filesystem-based clients can use agz-rust-mcp skills export. See bundled skills. Bundled skills are available from 0.4.0; 0.3.0 binaries do not include them.

Client	Configuration	Guide
ZCode	`~/.zcode/cli/config.json` → `mcp.servers.rust`	ZCode
OpenCode	`opencode.jsonc` → `mcp.rust`	OpenCode
OpenCode2	`opencode.jsonc` → `mcp.servers.rust`	OpenCode2
Codex	`~/.codex/config.toml` → `mcp_servers.rust`	Codex

Use the example for your client; OpenCode and OpenCode2 have different layouts. All launch the installed agz-rust-mcp binary. Run agz-rust-mcp --version once before connecting, and use an absolute path if the client's PATH differs.

The canonical current directory is the default authorized root. Add explicit roots with repeated --allow-root arguments when the client starts elsewhere; client-provided MCP roots may narrow configured access but never widen it. See docs/install.md for per-client setup.

Documentation

Read the documentation in this order:

Install and client setup - every install method and client configuration.
Tool and configuration reference - tools, actions, result semantics, and all configuration keys.
Architecture - process model, protocol lifecycle, and authority boundaries.
Validation and benchmark protocol - smokes, gates, and evidence.
Security policy and Contributing.

The bilingual index with the full reading path is docs/README.md / docs/README.tr.md.

Identity

Contract	Value
Crate, binary, server	`agz-rust-mcp`
MCP Registry	`io.github.ugur-murat-alt/agz-rust-mcp`
Source version	`0.4.0`
First release	`0.1.0`
Release tag	`agz-rust-mcp-v<version>`
Rust edition / MSRV	`2024` / `1.88.0`
Rust MCP SDK	`rmcp` `3.1.4`
Default / discovered protocol	`2025-11-25` / `2026-07-28`

MCP package ownership marker: mcp-name: io.github.ugur-murat-alt/agz-rust-mcp.

Tools

OpenCode2 commonly exposes grouped MCP tools as rust_*.

MCP tool	OpenCode2 direct name	Default	Purpose
`check`	`rust_check`	`enabled`	Run bounded Cargo check, Clippy, tests, docs, or the full gate.
`profile`	`rust_profile`	`enabled`	Analyze observed Cargo rebuild behavior and compare bounded build evidence without claiming unmeasured speedups.
`audit`	`rust_audit`	`enabled`	Scan Rust source for bounded static findings.
`crate_lookup`	`rust_crate_lookup`	`enabled`	Verify a crate and optional exact version on crates.io.
`docs`	`rust_docs`	`enabled`	Resolve exact-version docs from cache, local sources, or docs.rs.
`context`	`rust_context`	`enabled`	Prepare, expand, or delta a revision-bound semantic context capsule with per-item reasons.
`api`	`rust_api`	`enabled`	Resolve an API signature from bounded analyzer evidence or type-check a candidate snippet in an isolated copy of the workspace configuration.
`explain`	`rust_explain`	`enabled`	Explain macro expansion provenance, trait obligations, or cfg enablement.
`verify`	`rust_verify`	`enabled`	Plan or run a bounded feature, target, toolchain, and stage matrix.
`symbol`	`rust_symbol`	`enabled`	Read Rust Analyzer hover data for one symbol.
`references`	`rust_references`	`enabled`	Find bounded references.
`definition`	`rust_definition`	`enabled`	Find the selected definition.
`symbols`	`rust_symbols`	`enabled`	List symbols in one Rust file.
`implementations`	`rust_implementations`	`enabled`	Find implementations.
`hierarchy`	`rust_hierarchy`	`enabled`	Trace a bounded call hierarchy.
`rename`	`rust_rename`	`enabled`	Produce a verified rename edit package without applying it.
`refactor`	`rust_refactor`	`enabled`	Produce a verified refactor edit package without applying it.
`change`	`rust_change`	`enabled`	Create, stage, migrate, and validate a revision-bound changeset in server-owned scratch without writing the workspace.
`repair`	`rust_repair`	`enabled`	Analyze, try, compare, and minimize compiler-driven repair candidates for a failing change revision without writing the workspace.
`work`	`rust_work`	`enabled`	Drive a typed intent through change/validate with explicit gates and budgets, returning honest gate evidence or a bounded single-use handoff.

Every tool returns deterministic structured data plus an equivalent bounded text fallback. External data stays under untrustedData. Expected domain outcomes such as compiler failure, missing crates, or unavailable docs are typed results; invalid input, authorization failure, resource exhaustion, and unavailable semantic infrastructure are protocol errors.

Configuration

Precedence is CLI, then AGZ_RUST_MCP_* environment variables, then the explicit --config TOML file, then defaults. Environment keys use __ between sections, for example AGZ_RUST_MCP_GATE__HARD_TIMEOUT_MS=600000.

Key	Default	Meaning
`server.allow_roots`	canonical CWD	Workspace read/command boundary.
`server.allow_dependency_roots`	empty	Explicit external path-dependency roots.
`gate.hard_timeout_ms`	`600000`	Cargo operation deadline.
`gate.scope`	`shadow`	Validation target: `workspace`, `shadow`, or `affected`.
`gate.cache`	`auto`	Cache policy: `auto`, `project`, or `isolated`.
`rust_analyzer.workspace_code`	`deny`	Reject RA startup unless workspace code is disabled.
`docs.fallback`	`auto`	Documentation source policy.
`profile.max_report_bytes`	`4194304`	Bounded read/store cap for one Cargo timing artifact.
`profile.max_runs`	`4`	Fresh Cargo runs available to one `profile` call.
`profile.compare_samples`	`3`	Required samples per side before any speed claim.
`limits.tool_output_bytes`	`49152`	Maximum serialized tool result size.
`change.max_bytes`	`268435456`	Maximum captured candidate bytes per changeset.
`repair.max_candidates`	`4`	Candidates one `repair` action may try.
`repair.max_compiles`	`4`	Cargo validations one `repair` action may run.
`repair.wall_time_ms`	`120000`	Wall-clock budget for one `repair` action.
`repair.minimize_max_candidates`	`32`	Compile-evaluated reduction attempts one `repair(action=minimize)` may try.
`repair.minimize_max_compiles`	`16`	Cargo runs one `repair(action=minimize)` may execute, including reproduction and export verification.
`work.max_candidates`	`4`	Host candidate revisions one work item may stage.
`work.max_compiles`	`12`	Gate validations one work item may run.
`work.wall_time_ms`	`600000`	Wall-time budget for one work item.
`telemetry.enabled`	`true`	Bounded local activity records without prompts or source.

profile evidence is bounded: the latest 64 records stay in memory, and persisted timing artifacts under the server-owned profile-evidence directory are pruned after 24 hours or beyond 64 files. The profile result reports this retention policy, so expired evidence is visible instead of silently reused.

Run agz-rust-mcp --help for every CLI field. The complete behavior and default table is in docs/tools.md.

Security

The server does not modify workspace source, but it is not an operating-system sandbox. Cargo build scripts, tests, procedural macros, local rustdoc, and opted-in Rust Analyzer workspace code execute with the server user's authority. Use a container or OS sandbox when that boundary is required. Workspace, dependency, cache, lease, journal, docs, and telemetry paths are canonicalized, bounded, and fail closed, and stdout is reserved for MCP framing. Report vulnerabilities privately as described in SECURITY.md.

License

Reviews

No reviews yet

Be the first to review this server!

More Developer Tools MCP Servers

Git

Free

by Modelcontextprotocol · Developer Tools

Read, search, and manipulate Git repositories programmatically

Fetch

Free

by Modelcontextprotocol · Developer Tools

Web content fetching and conversion for efficient LLM usage

Paperclip

Free

by Paperclipai · Developer Tools

Trending hip-hop artist momentum scores across four cultural dimensions.

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.