gpt-mcp-launcher

The system exposes local MCP servers via ngrok without any explicit authentication on the API Gateway or the MCP servers themselves. The README explicitly warns against sharing the ngrok URL due to the lack of authentication. The provided `ngrok.yml` contains a hardcoded `authtoken`, which is a security risk if the repository is made public without modification. While `gateway.py` itself doesn't show obvious vulnerabilities like `eval`, the architecture's reliance on public tunneling without access control is a significant concern. Running this system could lead to unauthorized access to local resources if the ngrok URL is compromised.