MCP100 IndexGateway
WatchlistFirst-party MCP

ToolHive

by Stacklok

Reviewed October 5, 2026

GatewaySoftware & Technology

Watchlist tracking

Reviewed for relevance and future tracking value.

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Follow runtime isolation, registry, and deployment support because ToolHive is infrastructure

Reviewed · Documentation review; complete setup workflow not independently tested

Best fit

Teams deploying and governing MCP servers with isolation, registry and policy controls.

What we know

An open-source MCP platform with isolated runtimes, registry, gateway, policy, identity and observability features.

Maintenance / activity evidence

  • Observed (UTC)Update github actions ( 6747)

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · commits ↗Activity source · releases ↗

Verification gaps / watch-outs

  • Installation and comprehensive security have not been independently audited.
  • Policy- and server-specific. Writes: Depends on wrapped servers.
  • Configurable identity/OIDC/OAuth
  • Sensitive access: MCP credentials, Tool traffic
  • A governance platform can concentrate many MCP credentials and capabilities; provenance, identity and network controls are central.
Security source · repository notice ↗Security source · policy file ↗

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

2,238 repository stars

Stars observed Oct 6, 2026.

All limitations / Review context

Which server lifecycle and policy controls are supported in the next release?

The bounded assessment reviewed the official README, repository notices, security policy path, and security page for known material public-tracking blockers. No such blocker was identified. This is a public-tracking assessment, not an installation safety certification.

  • A governance platform can concentrate many MCP credentials and capabilities; provenance, identity and network controls are central.
  • Policy- and server-specific.
  • Configurable identity/OIDC/OAuth
  • MCP traffic and credentials may pass through the platform.
  • Reviewed write actions: Depends on wrapped servers
  • Sensitive access: MCP credentials, Tool traffic
  • Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
  • No independent runtime, installation, or comprehensive security audit was performed.
  • No installation, runtime, client matrix, or complete tool-contract audit was performed in this review.
  • Deployment differs across CLI/UI/Kubernetes modes.
  • Effective risk depends on the servers registered behind the gateway.

Original activity observations

  • 2026-10-05T12:29:34Z: Update github actions ( 6747)
Technical identity
github.com/stacklok/toolhive
Exact implementation source
https://github.com/stacklok/toolhive ↗
Reviewed resource type
Gateway
Repository identity
stacklok/toolhive

Evidence & Sources

Evidence basis
Recorded source evidence
Setup runtime verification
Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed · Latest source observation

  • GitHub repository ↗

    stacklok/toolhive

    Recorded repository material and project history.

  • Evidence source ↗

    docs.stacklok.com/toolhive/

    Source material retained for this review.

    Includes references whose attribution is not established.