MCP server giving AI agents a persistent, PTY-backed shell environment — real interactive sessions, deterministic prompt detection, and secret-safe input
Sertelegger/holdfast is an MCP server distributed on github, maintained by Sertelegger, tracked here since September 2026. It has shipped 3 releases. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.
Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.
full security breakdown →No tools recorded for this server yet.
06-18 00:00 08-01 00:00 now
| version | date | src |
|---|---|---|
| v0.0.7 | 2026-09-02 | github |
| v0.0.6 | 2026-09-02 | github |
| v0.0.5 | 2026-09-02 | github |