mcp-context-forge
Verified Safeby IBM
Overview
A comprehensive Model Context Protocol (MCP) gateway and proxy that unifies REST, MCP, and A2A services, providing features like federation, virtual servers, rate-limiting, security, and an optional admin UI for managing web content and file conversions to markdown.
Installation
uvx --from mcp-contextforge-gateway mcpgateway --host 0.0.0.0 --port 4444Environment Variables
- APP_NAME
- HOST
- PORT
- DATABASE_URL
- BASIC_AUTH_USER
- BASIC_AUTH_PASSWORD
- PLATFORM_ADMIN_EMAIL
- PLATFORM_ADMIN_PASSWORD
- PLATFORM_ADMIN_FULL_NAME
- AUTH_REQUIRED
- JWT_SECRET_KEY
- JWT_ALGORITHM
- JWT_PUBLIC_KEY_PATH
- JWT_PRIVATE_KEY_PATH
- JWT_AUDIENCE
- JWT_ISSUER
- TOKEN_EXPIRY
- REQUIRE_TOKEN_EXPIRATION
- AUTH_ENCRYPTION_SECRET
- MCPGATEWAY_UI_ENABLED
- MCPGATEWAY_ADMIN_API_ENABLED
- MCPGATEWAY_A2A_ENABLED
- TOOLOPS_ENABLED
- LLMCHAT_ENABLED
- EMAIL_AUTH_ENABLED
- SSO_ENABLED
- DCR_ENABLED
- AUTO_CREATE_PERSONAL_TEAMS
- MCPGATEWAY_CATALOG_ENABLED
- SKIP_SSL_VERIFY
- ENVIRONMENT
- LOG_LEVEL
- PLUGINS_ENABLED
- CACHE_TYPE
- REDIS_URL
Security Notes
The project demonstrates strong security practices, including extensive input validation (SQL, XSS, URI patterns) via `SecurityValidator` and Pydantic schemas, robust authentication (JWT, OAuth 2.0 DCR, SSO, RBAC), encrypted credential storage (using Argon2id and Fernet), configurable security headers (CSP, HSTS, X-Frame-Options), and a secure Python sandbox for code execution. Rust-accelerated plugins offer memory safety guarantees. Hardcoded secrets are generally default placeholders in `.env.example` or `docker-compose.yml` with clear guidance to change them, and validation enforces strong secrets in production.
Similar Servers
mcpo
Exposes Model Context Protocol (MCP) tools as OpenAPI-compatible HTTP servers for integration with LLM agents and other applications.
mcphub
A hub for managing, orchestrating, and providing a unified API for various Model Context Protocol (MCP) servers and their tools, including user management, OAuth services, and discovery of external servers.
mcp-openapi-server
Exposes OpenAPI endpoints as Model Context Protocol (MCP) tools, enabling Large Language Models (LLMs) to discover and interact with REST APIs through a standardized protocol.
zeromcp
A minimal, pure Python Model Context Protocol (MCP) server for exposing tools, resources, and prompts via HTTP/SSE and Stdio transports.