Skip to main content
Glama
Sign In
MCP Gateway

MCP Gateway

by jayanth-iyer
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

MCP Gateway

A single MCP server for internal LLM services. Those services call only the gateway; the gateway routes to per-app MCPs (ADO, Oracle, and the rest of the estate).

Internal LLM  →  MCP Gateway (one MCP)  →  ADO MCP, Oracle MCP, … (~50 app MCPs)

v1 also applies identity, redaction, authorization, and audit on that hop. Downstream MCP URLs and which caller may use which MCP live in static config (config/mcp-servers.yaml). IDE clients are out of scope.

This branch implements feature 1: authenticated tool discovery. tools/call, redaction, and audit are still stubbed.

See docs/mcp-gateway.md for locked decisions and BDD.

Tech stack

Layer

Choice

Why

Language

Python 3.12+

Matches the team preference; strong libraries for HTTP proxies, policy, and data masking

HTTP API

FastAPI + Uvicorn

Native async, typed request models, good fit for a JSON-RPC/MCP front door on port 8000

Settings

Pydantic Settings

Env-driven config (MCP_GATEWAY_*) without a custom loader

Registry

Static YAML

config/mcp-servers.yaml — no dynamic registration in v1

Audit store

SQLAlchemy 2 (asyncio) + aiosqlite

Local SQLite audit table; same engine can move to Postgres

Downstream MCP

httpx

Async client for MCP JSON-RPC against registered app MCPs

Tests

pytest + pytest-asyncio

FastAPI TestClient for the health/JSON-RPC stubs; BDD scenarios live under tests/features/

Lint

Ruff

Single tool for lint and import sorting

Related MCP server: MCP Policy Gateway

Layout

config/mcp-servers.yaml    # Static registry (ADO, Oracle examples)
src/mcp_gateway/
  main.py                  # FastAPI app factory and uvicorn entrypoint
  config.py                # Settings
  api/                     # HTTP: /health and JSON-RPC POST /
  auth/                    # Token → internal LLM caller (stub)
  governance/              # Redaction + authorization (stubs)
  audit/                   # Append-only audit store (stub)
  registry/                # Static YAML catalog
  proxy/                   # MCP client to app MCPs
  discovery.py             # tools/list aggregation + namespacing
tests/
  features/                # Gherkin aligned with the architecture doc

Local run

Requires Python 3.12+ and uv.

uv sync --group dev
cp .env.example .env
uv run mcp-gateway

Service listens on http://localhost:8000.

curl -s http://localhost:8000/health
curl -s -X POST http://localhost:8000/ \
  -H 'content-type: application/json' \
  -H 'authorization: Bearer coding-assistant-dev-token' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
uv run pytest

This server cannot be deployed

Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • Multi-Provider LLM MCP Server

    itachiuchihadev
    F
    license
    A
    quality
    D
    maintenance
    Unified MCP server for querying multiple LLM providers (Gemini, OpenAI, Anthropic, etc.) with advanced routing, cost optimization, and fallback resilience.
    2
    22 npm
    -

  • MCP Policy Gateway

    ahmed0qaid
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents and MCP clients to safely access upstream MCP servers through centralized policy enforcement, including allow/deny/approval decisions, schema pinning, circuit breakers, and audit logging.
    MIT

  • mcp-gateway

    gishwinantony
    A
    license
    Not graded
    quality
    C
    maintenance
    Provides a security and context-control layer that multiplexes multiple MCP servers behind a single endpoint, scanning tool definitions and results, enforcing authorization, rate limiting, and audit logging, and dynamically retrieving tools to manage context window usage.
    MIT

  • ToolBox

    gaharivatsa
    A
    license
    A
    quality
    C
    maintenance
    Puts a single MCP endpoint in front of many downstream MCP servers, routing each prompt to the right server and tools so an agent sees a few relevant tools instead of every schema. Reads run automatically, writes require explicit user confirmation via elicitation, and consequential calls are blocked by a risk gate that logs every routing decision and call.
    3
    MIT