yawlabs avatar

Electron MCP Server

yawlabs/electron-mcp

Builds a bridge between Claude and Electron.js development workflows, exposing tools for IPC scaffolding, security audits, and build configuration. You'd reach for this when building desktop apps with Electron and want AI assistance with setting up inter-process communication patterns, checking for common security issues like nodeIntegration misconfigurations, or managing electron-builder configs. Handles the boilerplate and security checks that trip up Electron projects, letting you describe what you need at a higher level instead of manually wiring up main/renderer process communication or hunting through security best practices docs.

GitHub stars
3
tools
18
transport
STDIO
last updated
Nov 12, 2026

Tools

18 tools

Public tool metadata for what this MCP can expose to an agent.

electron_scaffold_ipc_channelGenerate a complete IPC round-trip: main handler, preload bridge, contextBridge exposure, TypeScript types, renderer usage.

Generate a complete IPC round-trip: main handler, preload bridge, contextBridge exposure, TypeScript types, renderer usage.

No parameter schema in public metadata yet.

electron_generate_preload_bridgeGenerate a secure preload.ts with contextBridge for multiple API methods.

Generate a secure preload.ts with contextBridge for multiple API methods.

No parameter schema in public metadata yet.

electron_audit_ipc_securityAnalyze preload/main/renderer code for IPC security issues (direct ipcRenderer, missing sender validation, channel injection).

Analyze preload/main/renderer code for IPC security issues (direct ipcRenderer, missing sender validation, channel injection).

No parameter schema in public metadata yet.

electron_generate_window_managerMulti-window management with lifecycle tracking and inter-window communication.

Multi-window management with lifecycle tracking and inter-window communication.

No parameter schema in public metadata yet.

electron_explain_process_modelVersion-aware explanation of Electron's multi-process architecture (main vs renderer vs utility, what lives where).

Version-aware explanation of Electron's multi-process architecture (main vs renderer vs utility, what lives where).

No parameter schema in public metadata yet.

electron_audit_securityAudit against 19 of the 20 official security recommendations that can be detected from static inputs: BrowserWindow, preload, CSP, remote content, sandbox.

Audit against 19 of the 20 official security recommendations that can be detected from static inputs: BrowserWindow, preload, CSP, remote content, sandbox.

No parameter schema in public metadata yet.

electron_configure_fusesGenerate @electron/fuses config for production hardening (disable cookie encryption fallback, Node CLI flags, legacy load behaviour).

Generate @electron/fuses config for production hardening (disable cookie encryption fallback, Node CLI flags, legacy load behaviour).

No parameter schema in public metadata yet.

electron_configure_cspGenerate a Content Security Policy aware of your bundler (Vite/webpack/Parcel) and framework (React/Vue/Svelte).

Generate a Content Security Policy aware of your bundler (Vite/webpack/Parcel) and framework (React/Vue/Svelte).

No parameter schema in public metadata yet.

electron_lint_securityStatic analysis for dangerous patterns: shell.openExternal with untrusted input, @electron/remote, enableBlinkFeatures, etc.

Static analysis for dangerous patterns: shell.openExternal with untrusted input, @electron/remote, enableBlinkFeatures, etc.

No parameter schema in public metadata yet.

electron_diagnose_build_errorParse electron-builder/forge errors and identify root causes: code signing, native modules, ASAR, entitlements, path quoting.

Parse electron-builder/forge errors and identify root causes: code signing, native modules, ASAR, entitlements, path quoting.

No parameter schema in public metadata yet.

electron_configure_auto_updateGenerate complete electron-updater setup with events and platform-specific signing concerns.

Generate complete electron-updater setup with events and platform-specific signing concerns.

No parameter schema in public metadata yet.

electron_configure_deep_linkingCustom protocol registration across Windows/macOS/Linux.

Custom protocol registration across Windows/macOS/Linux.

No parameter schema in public metadata yet.

electron_scaffold_projectGenerate a secure, modern Electron project scaffold (contextIsolation: true, sandbox: true, preload, TypeScript, chosen framework).

Generate a secure, modern Electron project scaffold (contextIsolation: true, sandbox: true, preload, TypeScript, chosen framework).

No parameter schema in public metadata yet.

electron_migrate_versionMigration checklist between Electron versions with breaking changes, deprecated APIs, platform support changes.

Migration checklist between Electron versions with breaking changes, deprecated APIs, platform support changes.

No parameter schema in public metadata yet.

electron_check_deprecated_apisScan source for APIs deprecated or removed in the target Electron version.

Scan source for APIs deprecated or removed in the target Electron version.

No parameter schema in public metadata yet.

electron_audit_performanceDetect the 7 official Electron performance anti-patterns (sync I/O on main, eager loading of heavy modules, etc).

Detect the 7 official Electron performance anti-patterns (sync I/O on main, eager loading of heavy modules, etc).

No parameter schema in public metadata yet.

electron_explain_conceptAuthoritative explainer for 8 topics: process model, context isolation, sandbox, IPC, ASAR, fuses, code signing, build tools.

Authoritative explainer for 8 topics: process model, context isolation, sandbox, IPC, ASAR, fuses, code signing, build tools.

No parameter schema in public metadata yet.

electron_knowledge_versionMetadata about the embedded knowledge: last-verified date, Electron stable at verification, supported version range.

Metadata about the embedded knowledge: last-verified date, Electron stable at verification, supported version range.

No parameter schema in public metadata yet.

Sponsors

Readme

@yawlabs/electron-mcp

Add to Yaw MCP

One click adds this to your local Yaw MCP config so it's available in every Yaw Terminal session. Or install manually below.

npm version License: MIT GitHub stars

Make your AI assistant actually good at Electron. 18 tools for the stuff AI models hallucinate about: context isolation, preload bridges, fuses, CSP, signing, auto-updates, breaking changes between majors, and the 20 official security recommendations.


View the full README on GitHub

Details

Repository
github.com/yawlabs/electron-mcp
Website
yaw.sh/mcp-servers/electron-mcp
Category
Security & Pentesting
Package
@yawlabs/electron-mcp
Transport
STDIO
Registry
MCP registry, active

More from yawlabs

Related Security & Pentesting MCP servers

View all
1parth-unjiya avatarOdoo Mcp Gatewayparth-unjiya/odoo-mcp-gatewaySecurity-first MCP gateway for Odoo 17/18/19 — YAML-driven security, 27 tools3stars
2salrad22 avatarCode Sentinelsalrad22/code-sentinelCode quality analysis MCP server - detects security issues, deceptive patterns, and placeholders3stars
3sparkvibe-io avatarGuardianshieldsparkvibe-io/guardianshieldAI security layer: code scanning, PII detection, prompt injection, secrets, CVEs3stars
4symdex-100 avatarSymdexsymdex-100/symdexIndex and search codebases using structured schemas for deep code analysis. Audit specific domains or security-related functions to ensure code quality and safe3stars
5symdex-100 avatarSymdexsymdex-100/symdexIndex and search codebases using structured schemas for deep code analysis. Audit specific domains or security-related functions to ensure code quality and safe3stars
6vdalhambra avatarSiteaudit Mcpvdalhambra/siteaudit-mcpSEO, performance, and security audits for any URL — no API keys required3stars