Skip to main content
Glama
deenesjakoruzh
navadiashrey

external-ai-ecosystem-gateway

by navadiashrey
OverviewSchemaRelated ServersScoreDiscussions
Python
Remote

External AI Ecosystem Gateway

一个面向安全的 Python 网关，向兼容 MCP 的助手客户端暴露按权限范围限定的工具，同时中介对外部系统（如 Slack）的访问。它演示了租户隔离、委派授权、敏感写入的人工确认、幂等执行、签名 Webhook 验证、支持撤销的授权存储，以及哈希链审计追踪。

这是一个作品集/参考实现，不是生产级身份提供方。部署前，必须将基于请求头的开发认证适配器替换为 docs/security.md 中描述的 OIDC 验证中间件。

架构

Assistant / Slack client
          |
          v
  FastAPI edge + auth adapter
          |
          v
 Policy + tenant boundary ----> confirmation tokens
          |
          v
 Sandboxed tool registry -----> Slack / OpenAI / Claude adapters
          |
          +--------------------> idempotency store
          +--------------------> append-only hash-chained audit log

Related MCP server: Nervora

快速开始

python -m venv .venv
source .venv/bin/activate
pip install -e '.[dev]'
uvicorn ecosystem_gateway.app:app --reload

列出工具：

curl localhost:8000/mcp/tools \
  -H 'X-Subject: user-1' -H 'X-Tenant-Id: tenant-a' -H 'X-Roles: operator'

使用 pytest 运行测试套件。当未配置 Slack 令牌时，连接器以安全沙箱模式运行，并返回其将要发出的请求。

安全属性

  • 每个主体和幂等键都按租户命名空间隔离。

  • 工具策略将最小权限角色与委派作用域相结合。

  • 敏感写入需要绑定到主体、租户、工具和参数的短期令牌。

  • Webhook 签名使用恒定时间比较，并拒绝过期请求。

  • 审计记录形成 SHA-256 链，因此删除或篡改可被检测。

  • OAuth 授权支持撤销，且绝不通过工具结果暴露刷新令牌。

有关生产加固清单和威胁模型，请参阅 docs/security.md。

许可证

MIT

This server cannot be installed

A
license - permissive license
Not graded
quality - not tested
D
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • Nervora

    sveselaj
    A
    license
    Not graded
    quality
    C
    maintenance
    A secure MCP gateway for enterprise AI tool execution, enabling governed invocation of business tools with authentication, RBAC, audit logging, PII redaction, and async processing.
    Apache 2.0
  • AgentsGate by agentsgate

    AgentsGateofficial

    agentsgate
    A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to securely call MCP tools with risk scoring, checkpoints, rollback, and approval workflows.
    134
    MIT

View all related MCP servers

Related MCP Connectors

  • Oakallow

    Runtime permission, approval, and audit layer for AI agent tool execution.

  • secureflows-mcp-server

    MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.

  • Hail

    Phone, SMS & email for AI agents — one remote MCP endpoint, OAuth login, zero install.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/navadiashrey/external-ai-ecosystem-gateway'

If you have feedback or need assistance with the MCP directory API, please join our Discord server