Skip to main content
Glama
kmjtechno

KMJ CodeBridge

Official
by kmjtechno
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Hybrid

KMJ CodeBridge

License

Connect your systems. Build with AI.

KMJ CodeBridge is a secure, vendor-neutral MCP coding bridge for controlled AI-assisted development across authorized computers and VPSs. ChatGPT, Claude.ai, Claude Desktop, Claude Code and other MCP clients use the same gateway, tools and security controls. Commercial licensing belongs to KMJ Main Platform.

Status: executable developer preview, not production GA

This repository includes a real Streamable HTTP MCP gateway using the official SDK, an outbound-polling device agent, scoped file operations, administrator-defined quality gates, durable job results and an Ed25519 entitlement verifier. The tests exercise a real MCP client, gateway and agent over loopback HTTP.

Not yet delivered: public hosted endpoint, live OAuth account linking, live Main Platform billing/renewal adapter, native Rust agent, signed OS installers, public plugin or connector approval (OpenAI or Anthropic), SSO, or a production security certification. A source upload is not a connected ChatGPT or Claude installation. See status.

Related MCP server: SoloCore Agent Gateway

Supported AI clients

Client

How it connects

Current state

ChatGPT

Plugin package + remote MCP

Package tested; live connection needs hosted OAuth

Claude Code

claude plugin marketplace add kmjtechno/kmj-codebridge

Plugin validated by claude plugin validate in CI

Claude Desktop

Custom connector to a public HTTPS /mcp URL

Documented; needs hosted endpoint and OAuth

Claude.ai

Custom connector to a public HTTPS /mcp URL

Documented; not available until hosting and OAuth

Other MCP

Streamable HTTP with bearer or MCP OAuth

Covered by the vendor-neutral interop contract

All clients share one tool contract, one skill and one security model. Setup, prerequisites and limits for each client are in AI client support.

Quick start

Requires Node.js 24 and npm. Use a disposable development project initially.

npm ci --ignore-scripts
npm run check
npm test
npm run scan:secrets
npm run init -- /absolute/private-codebridge-config /absolute/development-project
npm run gateway -- /absolute/private-codebridge-config/gateway.json

In a second terminal:

npm run agent -- /absolute/private-codebridge-config/agent.json

The configuration directory must be outside the project. Initial access is read-only. The initializer generates credentials, stores only hashes at the gateway and writes no credentials to terminal output. Never commit or paste the generated files in chat. On Windows, use absolute Windows paths and restrict configuration ACLs to the service account. Unix configuration mode must be 0600.

A compatible MCP client can connect to http://127.0.0.1:8787/mcp using the bearer credential from client-token.txt, for example Claude Code (see AI client support). That is a local developer connection, not a public ChatGPT or Claude endpoint. For remote connections, configure TLS and the approved hostname; plain HTTP agents are limited to loopback. See deployment.

To enable editing, set the chosen project's writable to true in the private agent configuration. Add explicitly approved commands under gates, for example:

{
  "unit": { "command": "/usr/bin/node", "args": ["--test"], "timeoutMs": 30000 }
}

Use the actual absolute executable path on your machine. No shell is used. A gate runs real project code and is not a sandbox; run untrusted code in a separately isolated VM/container without host credentials.

Tools

Tool

Behavior

list_devices

Devices and projects allowed for the authenticated tenant

inspect_project, connection_doctor

Capabilities and connection information

git_status

Bounded Git status with fsmonitor disabled

read_file, search_code

Bounded UTF-8 reads and literal search, secret-path exclusions

preview_file, write_file

Expected-hash guarded replacements; no blind overwrite

run_quality_gate

Fixed administrator-configured command and arguments

get_job_status, cancel_job

Recorded state, output, exit code and process cancellation

The gateway routes to devices that poll outbound; it cannot independently read their files. Authorization is enforced at both the gateway and the agent. Devices do not need an inbound port. File writes use bounded synchronous precondition checks and atomic replacement; this is not a kernel security boundary against a malicious local process racing the agent.

Licensing and packaging

The preview has an explicit Free mode limited to one configured project and one concurrent job. Signed mode verifies an administrator-installed entitlement bound to the tenant and device. It does not manufacture trials or call a pretend billing endpoint. See licensing contract.

The source plugin contains no fabricated MCP URL. Once a real approved HTTPS endpoint with compatible authentication is available:

npm run package:plugin -- https://YOUR-ACTUAL-HOST/mcp   # ChatGPT / OpenAI package
npm run package:claude -- https://YOUR-ACTUAL-HOST/mcp   # Claude Code plugin + marketplace

Both build from the same plugin/ metadata and skill and write only to dist/ (or an empty --out directory). They do not publish anything, add OAuth or check that the endpoint is reachable. npm run package:claude -- URL --auth bearer-env makes Claude Code read the bearer credential from KMJ_CODEBRIDGE_TOKEN; no credential is ever written into a package. The bearer-auth developer preview requires a client capable of supplying a header; production OAuth account linking for ChatGPT and Claude is an outstanding integration gate.

Documentation

If this project is useful, star the repository and share a reproducible feature request. Please do not post credentials, source-code secrets or customer data in issues.

License

Copyright 2026 KMJ TECHNO.

KMJ CodeBridge is open-source software licensed under the Apache License 2.0. The license permits use, modification and distribution subject to its terms. The Apache License does not grant permission to use KMJ TECHNO trade names, trademarks, service marks or product names except as allowed by the license.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • SoloCore Agent Gateway

    lihongqing2001-gif
    A
    license
    Not graded
    quality
    A
    maintenance
    Enables local agents to securely connect to a managed hub via outbound connections, exposing controlled capabilities to MCP and A2A clients without requiring public inbound ports.
    Apache 2.0

  • Remote Coding Runtime

    aloneio
    F
    license
    Not graded
    quality
    A
    maintenance
    Enables MCP clients to safely access user-local filesystems, apply validated patches, inspect git state, and run persistent jobs on outbound-connected local runners through a stateless Cloudflare control plane.
    16
    -

  • ChatGPT Gateway MCP Nyan

    wada-qualia
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables agent clients to safely connect to tools and execution resources through MCP with authorization, approvals, audit, chat-context isolation, SSH/Docker access, and long-running command session tracking.
    MIT