restic-defensive-mcp MCP Server

Structurally read-only MCP server (stdio) for inspecting restic repositories through an untrusted MCP client without exposing a shell, free-form CLI, or mutation path.

Local serverstdio

What is the restic-defensive-mcp Server?

restic-defensive-mcp is an MCP project maintained in the thomascrouzet/restic-defensive-mcp repository. The maintainer describes its purpose as “Structurally read-only MCP server (stdio) for inspecting restic repositories through an untrusted MCP client without exposing a shell, free-form CLI, or mutation path”. Read the project documentation for the complete scope.

Local setup

The project provides a local client configuration using /absolute/path/to/restic-defensive-mcp. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
restic_capabilities	light
list_repositories	light
list_snapshots	light
get_snapshot	light
browse_snapshot	moderate
find_files	moderate–expensive
repository_stats	moderate–expensive

How to install the restic-defensive-mcp Server

{
  "mcpServers": {
    "restic-defensive": {
      "command": "/absolute/path/to/restic-defensive-mcp",
      "args": [
        "--config",
        "/etc/restic-defensive-mcp/config.yaml"
      ]
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.