Embedded MCP Servers

StackQL's MCP server can be embedded directly in compiled applications - no npx, no separate install, no runtime dependency. The signed binary is downloaded and verified on first run (sidecar mode) or vendored into your app binary for a single self-contained executable.

All four libraries share one contract: read_only mode by default, a cwd-independent launch, a shared binary cache at ~/.stackql/mcp-server-bin/, and the same four platform targets (linux-x64, linux-arm64, windows-x64, darwin-universal).

Go

Embed via go:embed or sidecar; official Go MCP SDK. Demo: sandboxctl, an on-demand infrastructure concierge.

Rust

Sidecar or include_bytes! vendoring; rmcp client. Demo: auditron, a terminal compliance copilot.

Swift

Bundle the notarised binary in a signed macOS app; official Swift MCP SDK. Demo: CloudLens, a menu-bar cloud sentinel.

Kotlin / JVM

Library + Gradle plugin; official Kotlin MCP SDK. Demo: costgate, a cost gate for CI/CD.

.NET / C#

Sidecar or vendored bundle; official C# MCP SDK. Demo: driftwatch, a scheduled drift-check worker.

Gleam

OTP-supervised on the Erlang/BEAM target; downloads and verifies the signed binary. Demo: pipewatch (planned).

Common contract

• Default read_only mode, with explicit opt-in to safe, delete_safe, or full_access.
• The binary is Apple-notarised on macOS and Authenticode-signed on Windows.
• sha256 pins are published per release.
• mcp-name io.github.stackql/stackql-mcp on the Official MCP Registry.

See the MCP tools reference and the install vectors.