Back to Home
IBM icon

mcp-context-forge

Verified Safe

by IBM

Overview

A comprehensive Model Context Protocol (MCP) gateway and proxy that unifies REST, MCP, and A2A services, providing features like federation, virtual servers, rate-limiting, security, and an optional admin UI for managing web content and file conversions to markdown.

Installation

Run Command
uvx --from mcp-contextforge-gateway mcpgateway --host 0.0.0.0 --port 4444

Environment Variables

  • APP_NAME
  • HOST
  • PORT
  • DATABASE_URL
  • BASIC_AUTH_USER
  • BASIC_AUTH_PASSWORD
  • PLATFORM_ADMIN_EMAIL
  • PLATFORM_ADMIN_PASSWORD
  • PLATFORM_ADMIN_FULL_NAME
  • AUTH_REQUIRED
  • JWT_SECRET_KEY
  • JWT_ALGORITHM
  • JWT_PUBLIC_KEY_PATH
  • JWT_PRIVATE_KEY_PATH
  • JWT_AUDIENCE
  • JWT_ISSUER
  • TOKEN_EXPIRY
  • REQUIRE_TOKEN_EXPIRATION
  • AUTH_ENCRYPTION_SECRET
  • MCPGATEWAY_UI_ENABLED
  • MCPGATEWAY_ADMIN_API_ENABLED
  • MCPGATEWAY_A2A_ENABLED
  • TOOLOPS_ENABLED
  • LLMCHAT_ENABLED
  • EMAIL_AUTH_ENABLED
  • SSO_ENABLED
  • DCR_ENABLED
  • AUTO_CREATE_PERSONAL_TEAMS
  • MCPGATEWAY_CATALOG_ENABLED
  • SKIP_SSL_VERIFY
  • ENVIRONMENT
  • LOG_LEVEL
  • PLUGINS_ENABLED
  • CACHE_TYPE
  • REDIS_URL

Security Notes

The project demonstrates strong security practices, including extensive input validation (SQL, XSS, URI patterns) via `SecurityValidator` and Pydantic schemas, robust authentication (JWT, OAuth 2.0 DCR, SSO, RBAC), encrypted credential storage (using Argon2id and Fernet), configurable security headers (CSP, HSTS, X-Frame-Options), and a secure Python sandbox for code execution. Rust-accelerated plugins offer memory safety guarantees. Hardcoded secrets are generally default placeholders in `.env.example` or `docker-compose.yml` with clear guidance to change them, and validation enforces strong secrets in production.

Similar Servers

Stats

Interest Score100
Security Score9
Cost ClassLow
Avg Tokens125
Stars2930
Forks420
Last Update2025-12-05

Tags

Web Content RetrievalMarkdown ConversionAPI GatewayMulti-tenancyAgent-to-Agent