local-mcp-gateway
Verified Safeby DXHeroes
Overview
Orchestrates local AI tools by acting as a middleware layer and central hub to manage multiple Model Context Protocol (MCP) servers, offering profile-based tool access, OAuth 2.1, and observability for AI clients.
Installation
curl -fsSL https://raw.githubusercontent.com/DXHeroes/local-mcp-gateway/main/docker-compose.hub.yml -o local-mcp-gateway.yml && docker compose -f local-mcp-gateway.yml up -d --pull alwaysEnvironment Variables
- NODE_ENV
- PORT
- DATABASE_URL
- CORS_ORIGINS
- LOG_LEVEL
- BETTER_AUTH_SECRET
- BETTER_AUTH_URL
- RESEND_API_KEY
- EMAIL_FROM
- GOOGLE_CLIENT_ID
- GOOGLE_CLIENT_SECRET
- GITHUB_CLIENT_ID
- GITHUB_CLIENT_SECRET
- OAUTH_ENCRYPTION_KEY
- PADDLE_API_KEY
- PADDLE_WEBHOOK_SECRET
- PADDLE_ENVIRONMENT
- LICENSE_PRIVATE_KEY
- LICENSE_PUBLIC_KEY
- SENTRY_DSN
- VITE_API_URL
Security Notes
The application appears to follow good security practices for a local-first application, including using `helmet` for HTTP headers, configurable CORS, and input validation. OAuth 2.1 with PKCE is implemented using standard cryptographic methods. Sensitive keys (like `OAUTH_ENCRYPTION_KEY`, `API_KEY`s) are designed to be environment variables. However, the storage of API keys and OAuth tokens in the local SQLite database is not explicitly shown to be encrypted at rest within the provided snippets, which is a potential concern for local data security. Network access is restricted to localhost by default in Docker configurations. No `eval` or similar dangerous patterns are used with untrusted input.
Similar Servers
mcp-context-forge
Converts web content (HTML, PDF, DOCX, etc.) and local files from a URL into high-quality Markdown format. It supports multiple conversion engines, content optimization, batch processing, and image handling.
mcphub
An orchestration hub that aggregates, manages, and routes Model Context Protocol (MCP) servers and their tools, providing a centralized interface, user management, OAuth 2.0 authorization server capabilities, and AI-powered tool discovery and routing.
MCPJungle
MCPJungle is a self-hosted Model Context Protocol (MCP) Gateway that allows developers to register and manage various MCP servers and their tools from a central location, enabling AI agents to discover and consume these tools from a single gateway.
aicode-toolkit
An MCP proxy server that aggregates multiple Model Context Protocol (MCP) servers, enabling on-demand tool discovery and execution, thereby significantly reducing AI agent token usage and improving context window efficiency by loading tools progressively.