MCP Gateway
An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.
Project links
How to use it
- Open the listing page and read the server's documentation.
- Copy the configuration or command into your MCP client.
- Restart the client and try one of the server's tools.
Copy setup details
Use these instructions in your own environment. Copying text here does not run it.
MCP configuration
Copy into a client that accepts mcpServers JSON. Other clients may use a different configuration format.
{
"mcpServers": {
"mcp-context-forge": {
"command": "uvx",
"args": [
"--from",
"mcp-contextforge-gateway",
"mcpgateway",
"--host",
"0.0.0.0",
"--port",
"4444"
]
}
}
}Security checks
Automated checks, last run Nov 2, 2026. They can miss problems and do not guarantee a listing is safe. Read the source and what you are asked to run before you use it.
- NoteKnown vulnerabilities in the packageLayer 2
OSV.dev lists advisories for some versions of this package. Make sure you install a release that fixes them.
Evidence (5)
- mcp-contextforge-gateway (any version): GHSA-9hgc-g3w5-67cm
- ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
- mcp-contextforge-gateway (any version): GHSA-vwf3-4xxj-qg6h
- mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment
- mcp-contextforge-gateway (any version): GHSA-xm98-3vcf-fph7
- mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
- mcp-contextforge-gateway (any version): PYSEC-2026-3684
- ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
- mcp-contextforge-gateway (any version): PYSEC-2026-3862
- mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
Source: OSV.dev
- PassedSetup commands and descriptionLayer 1
No blocking patterns. Notes are listed in the evidence.
Evidence (1)
- note: unpinned-package
- mcp-context-forge: uvx runs "mcp-contextforge-gateway" without a pinned version, so whoever owns that package name can change what runs
Source: AIWantsThis screening rules
- PassedSource repositoryLayer 2
The repository is public, not archived and has recent activity.
Evidence (3)
- Last push
- 2026-11-02
- Archived
- no
- License
- Apache-2.0
Source: GitHub