Mcp GatewayBLOCK
MCP Gateway and Registry
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
IMPORTANT NOTICE: This project has moved to https://github.com/agentic-community/mcp-gateway-registry and is now maintained by the Agentic Community. This repository is now archived and will no longer receive updates. Please use the new repository for the latest features, bug fixes, and active support.
MCP Gateway & Registry
Model Context Protocol (MCP) is an open standard protocol that allows AI Models to connect with external systems, tools, and data sources. While MCP simplifies tool access for Agents and solves data access and internal/external API connectivity challenges, several critical obstacles remain before enterprises can fully realize MCP's promise.
Discovery & Access Challenges:
- Service Discovery: How do developers find and access approved MCP servers?
- Governed Access: How do enterprises provide secure, centralized access to curated MCP servers?
- Tool Selection: With hundreds of enterprise MCP servers, how do developers identify the right tools for their specific agents?
- Dynamic Discovery: How can agents dynamically find and use new tools for tasks they weren't originally designed for?
The MCP Gateway & Registry solves these challenges by providing a unified platform that combines centralized access control with intelligent tool discovery. The Registry offers both visual and programmatic interfaces for exploring available MCP servers and tools, while the Gateway ensures secure, governed access to all services. This enables developers to programmatically build smarter agents and allows agents to autonomously discover and
38ee310b51efOBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add real-server-fake-tools-mcp --env ADMIN_PASSWORD=${ADMIN_PASSWORD} --env POLYGON_API_KEY=${POLYGON_API_KEY} --env SECRET_KEY=${SECRET_KEY} -- uvx real-server-fake-tools-mcp{
"mcpServers": {
"real-server-fake-tools-mcp": {
"command": "uvx",
"args": [
"real-server-fake-tools-mcp"
],
"env": {
"ADMIN_PASSWORD": "${ADMIN_PASSWORD}",
"POLYGON_API_KEY": "${POLYGON_API_KEY}",
"SECRET_KEY": "${SECRET_KEY}"
}
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
current_time_by_timezone | read | |
healthcheck | read |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- declared (10 observation(s))
- Shell
- declared (1 observation(s))
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (11)
result = eval(expression)
# logger.info(f"Login attempt with password: {password}, {cp}")proxy_pass http://127.0.0.1:7860/;
# proxy_pass http://127.0.0.1:8003/;
.env.template
.env.template
.env.template
INFO: Uvicorn running on http://0.0.0.0:7860 (Press CTRL+C to quit)
Setting status to 'checking' for /currenttime (http://0.0.0.0:8001/)...
Health check successful for /currenttime (http://0.0.0.0:8001/).
registry/static/logo.png
Gates applied: no_behavioural_pass.
38ee310b51effull audit observations/trust-audit/mcp-server/aarora79__mcp-gateway-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 38ee310b51ef | BLOCK | D | 69 | first audit |
Questions
What is the Mcp Gateway MCP server?
MCP Gateway and Registry
What tools does Mcp Gateway expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Mcp Gateway safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does Mcp Gateway need?
It reads ADMIN_PASSWORD, POLYGON_API_KEY and SECRET_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (38ee310b51ef), read on 2026-10-07. The repository is watched and re-audited when it changes.