SassyMCP

<!--
   Copyright (c) 2026 Shane Smith / Sassy Consulting LLC. All rights reserved.
   Proprietary source. This notice is Copyright Management Information (17 U.S.C. 1202); removal or alteration prohibited.
   CodeMark: SCLLC1-SassyMCP-HQ73WJ6U2BIV
-->
<!-- mcp-name: io.github.sassyconsultingllc/sassymcp -->
# SassyMCP

**One MCP server to replace them all.**

**274 tools | 36 modules | 18 tool groups | Replaces 75+ MCP servers | 34MB standalone exe**

*Last updated: 2026-07-15 — v1.12.0 | one-time perpetual licensing (free / pro / forensics)*

Compatible with Claude Desktop, Grok Desktop, Cursor, Windsurf, and any MCP client.

> **The official GitHub MCP server has [critical SHA-handling bugs](https://github.com/github/github-mcp-server/issues/2133).** SassyMCP's GitHub module uses correct blob SHA lookups, proper path encoding, atomic multi-file commits via Git Data API, retry logic with exponential backoff, and rate-limit awareness. It's a drop-in replacement that actually works.

## Why SassyMCP?

The MCP ecosystem is fragmented. Need file operations? Install Filesystem server. Need terminal? Desktop Commander. GitHub? Another server. Android? Another. Screenshots? Another. You end up with 6-10 separate MCP servers, each consuming context window, each with its own config, bugs, and update cycle.

SassyMCP replaces **75+ individual MCP servers** — including [Desktop Commander](https://github.com/wonderwhy-er/DesktopCommanderMCP) (5.9k stars), [Windows-MCP](https://github.com/CursorTouch/Windows-MCP) (5k stars), [GitHub MCP Server](https://github.com/github/github-mcp-server) (28.6k stars), Anthropic's official [Filesystem](https://github.com/modelcontextprotocol/servers/tree/main/src/filesystem) and [Memory](https://github.com/modelcontextprotocol/servers/tree/main/src/memory) servers, [mobile-mcp](https://github.com/mobile-next/mobile-mcp) (4.4k stars), and dozens more — with a single 34MB exe.

**Key differentiators:**
- **Smart Tool Loading** — Only loads tool groups you use. Reduces context window overhead from ~25K tokens to ~5K tokens by default.
- **Dynamic Vision** — Real-time screen monitoring with change detection for both desktop and Android. No more screenshot-and-pray.
- **Android Interaction** — Full phone control via UI accessibility tree: tap, swipe, type, with automatic sensitive context detection (auth/payment screens auto-block).
- **Pause/Resume** — User takes over the phone for manual steps (login, 2FA, account selection), AI watches and learns, then resumes autonomously.
- **Usage Tracking** — ML-lite scoring of tool invocations with exponential decay. Your most-used tools load first.
- **Context Estimation** — Built-in tool to measure how much of your 200K context window tool definitions consume.
- **Response Minification** — GitHub API responses stripped of URL metadata bloat (40-70% smaller).
- **Safe Delete** — Delete commands (`rm`, `del`, `Remove-Item`, etc.) are intercepted across all shells. Instead of destroying files, targets are moved to a `_DELETE_/` staging folder in the same directory for human review — protecting against AI hallucinations.
- **Guided Setup** — Wizard walks through persona, GitHub token, SSH credentials, and optional tool discovery.

## What It Replaces

| Domain | SassyMCP Module | Replaces | Top Alternative |
|--------|----------------|----------|----------------|
| File operations | FileOps, Editor | 11 filesystem/editor MCP servers | [Filesystem](https://github.com/modelcontextprotocol/servers/tree/main/src/filesystem) (Anthropic official) |
| Shell / terminal | Shell, Session | 5 shell MCP servers | [Desktop Commander](https://github.com/wonderwhy-er/DesktopCommanderMCP) (5.9k stars) |
| Desktop automation | UIAutomation, Vision | 9 desktop MCP servers | [Windows-MCP](https://github.com/CursorTouch/Windows-MCP) (5k stars) |
| GitHub / Git | GitHub Quick, GitHub Full | 5 GitHub/Git MCP servers | [GitHub MCP Server](https://github.com/github/github-mcp-server) (28.6k stars) |
| Android / phone | ADB, PhoneScreen | 9 mobile MCP servers | [mobile-mcp](https://github.com/mobile-next/mobile-mcp) (4.4k stars) |
| Network scanning | NetworkAudit | 8 nmap/security MCP servers | [mcp-for-security](https://github.com/cyproxio/mcp-for-security) (601 stars) |
| Security auditing | SecurityAudit | 8 security MCP servers | [mcp-security-hub](https://github.com/FuzzingLabs/mcp-security-hub) (509 stars) |
| SSH / remote Linux | Linux | 7 SSH MCP servers | [ssh-mcp](https://github.com/tufantunc/ssh-mcp) (365 stars) |
| Memory / state | Memory, StateManager | 7 memory MCP servers | [mcp-memory-service](https://github.com/doobidoo/mcp-memory-service) (1.6k stars) |
| OCR / screen reading | Vision | 7 OCR/vision MCP servers | [PaddleOCR MCP](https://paddlepaddle.github.io/PaddleOCR/) |
| Web inspection | WebInspector, Utility | 7 web/fetch MCP servers | [Fetch](https://github.com/modelcontextprotocol/servers/tree/main/src/fetch) (Anthropic official) |
| Windows system | Registry, ProcessManager, Clipboard, EventLog, Bluetooth | 13 Windows MCP servers | [Windows-MCP](https://github.com/CursorTouch/Windows-MCP) (5k stars) |

**Plus features with no MCP server equivalent:** phone pause/resume with sensitive context detection (auto-blocks on login/payment screens), operational hooks (14 expert playbooks), safe delete interception, Windows autorun forensics, Android+Windows clipboard sync, usage-weighted smart loading.

## Licensing

**Every tool group ships unlocked, for everyone, with no key required.** As of v1.13.0 the release model is all-or-nothing — there is no free/pro split, no gated groups, no crippled demo. The 274 tools you see in the module table below are the product, out of the box.

**Supporter licenses (optional):** SassyMCP can still be purchased through [LemonSqueezy](https://sassyconsultingllc.com/store) as a **one-time supporter license** (no subscriptions). Activating a key registers your machine as a seat and records a supporter tier that shows in the startup banner, control panel, and VS Code cockpit — it does not unlock anything, because everything is already unlocked. Buy once to support development; refunds revoke the label automatically.

**Activation flow (supporters):**
1. Purchase at `https://sassyconsultingllc.com/store` — LemonSqueezy emails you a key (`XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX`).
2. Activate from your AI agent: `sassy_setup_license action=activate key=...`
3. Or from a terminal: `sassymcp.exe setup` opens the interactive menu.

**Offline operation:** Once activated, a local HMAC-signed payload lets the supporter tier validate fully offline. A weekly re-check against LS catches refunds and cancellations; a faster startup check against the SassyMCP billing oracle cuts refund-to-revocation latency to seconds. Missing, expired, tampered, or corrupt license files just show the free label — tool availability is never affected.

**Back-compat:** `SASSYMCP_LICENSE_BYPASS=1` (the old dev escape hatch that unlocked gated groups) is accepted and ignored — there is nothing left to bypass.

## Running supervised (`sassymcp supervise`)

For always-on / remote deployments, run SassyMCP under its built-in supervisor instead of bare launcher scripts:

```
sassymcp.exe supervise start              # bridge only (127.0.0.1:21001)
sassymcp.exe supervise start --tunnel-mode managed   # also run the cloudflared tunnel as a child
sassymcp.exe supervise status             # JSON status; exit code != 0 if unhealthy
sassymcp.exe supervise stop               # graceful stop
```

The supervisor owns the runtime tree and makes it self-healing and **orphan-proof**:

- **No orphans, ever.** A hard kill of the supervisor (crash, `kill -9`, `taskkill /f`) takes every child with it — on Windows via a Job Object (`KILL_ON_JOB_CLOSE`), on Linux via process groups + `PR_SET_PDEATHSIG`. No leftover bridge holding a wedged SQLite/WAL lock, which is what the old `taskkill`-based scripts caused.
- **Self-healing.** Crashed children restart with exponential backoff (and give up cleanly after a crash-loop, rather than spinning).
- **Catches hangs.** An HTTP readiness probe recycles a *hung-but-alive* bridge — the failure a Windows scheduled task can never detect.
- **Crash-survivable control.** A pidfile + on-disk registry under `$SASSYMCP_HOME` mean `supervise status`/`stop` work even when the bridge is down, so an operator or agent can recover a wedged system.

`start-supervised.bat` wraps this as the recommended Windows launcher. stdio mode (Claude Desktop pipe) is client-owned and intentionally not supervised.

## Modules

| Module | Tools | Group | Description |
|--------|-------|-------|-------------|
| **Meta** | 9 | meta | Context estimation, tool usage analytics, group management |
| **FileOps** | 10 | core | Read, write, search, move, copy, edit, mkdir, file info, safe delete |
| **Shell** | 2 | core | PowerShell, CMD, WSL execution with syntax normalization and delete interception |
| **UIAutomation** | 6 | core | Desktop state, click, type, hotkeys, screenshots, screen info |
| **Editor** | 2 | core | Surgical find/replace, multi-edit |
| **Audit** | 4 | core | Audit log read, search, clear, false-positive tracking |
| **Session** | 6 | core | Persistent terminal sessions (start, read, send, stop) |
| **GitHub Quick** | 6 | github_quick | Daily-driver: push_files, get_file, issue, PR, protect |
| **Persona** | 7 | persona | Expert-mode directives, decision framework, engineering standards |
| **Utility** | 11 | utility | Env vars, toast, zip/tar/unzip/untar, HTTP requests, file diff |
| **Setup** | 8 | setup | Setup wizard, GitHub token guide, SSH setup, tool checker, license activation |
| **ToolsManager** | 1 | setup | External tool bootstrap and detection |
| **Observability** | 3 | infrastructure | Health, metrics, tool stats |
| **StateManager** | 3 | infrastructure | Persistent key-value state across sessions |
| **RuntimeConfig** | 3 | infrastructure |