Gateway MCP Server

by bolyra Your server? Claim it

local only

Gateway runs on your own machine — the client starts it, so there is no endpoint to ping. 97 installs a week from npm. Last commit 18 Sep 2026.

MCP auth gateway: verify agent identity, enforce per-tool permissions, block replays, emit receipts.

Installs per day peak 42 · avg 9 · +424% w/w

a month agotoday

Installs / week

npm · @bolyra/gateway

Stars

1 open issues

18 Sep 2026

Last commit

0 releases in 90 days

Apache-2.0

License

TypeScript

What the code does

We read the source, 22 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

File ships in the package but is absent from the source [пакет] src/cli.ts:1, [пакет] src/config.ts:1, [пакет] src/credential-binding.ts:1 и ещё 9

этот файл ставится пользователю, но в репозитории его нет

Runs an external command differentiation-autoresearch/tier3_adversarial.py:84, discovery-autoresearch/run_tier3_challenge.py:111, discovery-autoresearch/sources/fetch_signals.py:38 и ещё 8

        result = subprocess.run(

Builds a file path from a variable integrations/cli/src/commands/doctor.ts:93, integrations/cli/src/verify/nonce-store.ts:142, integrations/cli/src/verify/proofs.ts:95 и ещё 3

        const content = fs.readFileSync(path.join(receiptDir, latest), 'utf-8');

Runs an external command integrations/cli/src/commands/run.ts:105, integrations/cli/src/commands/shield-test.ts:230, integrations/cli/src/verify/isolation.ts:95 и ещё 5

  const child: ChildProcess = spawn(serverCmd, serverCmdArgs, {

Sends data to a third-party sink integrations/cli/src/verify/binding.ts:94, integrations/hosted-verify/src/verify/binding.ts:80

export function checkRequestBinding(

Page executes code built at runtime landing/agent-spend.html:240, landing/benchmark.html:308

      pipeline.innerHTML = STEPS.map(s =>

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add gateway -- npx -y @bolyra/gateway

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "gateway": {
      "args": [
        "-y",
        "@bolyra/gateway"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.gateway]
command = "npx"
args = ["-y", "@bolyra/gateway"]

.cursor/mcp.json

{
  "mcpServers": {
    "gateway": {
      "args": [
        "-y",
        "@bolyra/gateway"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "gateway": {
      "args": [
        "-y",
        "@bolyra/gateway"
      ],
      "command": "npx"
    }
  }
}

Alternatives to Gateway

same job, measured the same way

MCP Gateway

by titus-civic

Identity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.

answering

Shield

by bolyra

Stdio MCP auth proxy: wrap any MCP server with per-tool permission enforcement.

35 installs/wk local only

HODLXXI Read-Only

by hodlxxi

Public read-only MCP server for HODLXXI agent identity, trust, receipts, and verification.

26 tools answering

AxioRank: Zero-Trust for AI Agents

by axiorank

Zero-trust gateway for AI agents: score tool calls, verify agent cards, enforce policy, audit.

22 tools answering

Proofable MCP

by proofable

Give AI agents identity, permissions, and reusable proof through one MCP.

answering

AgentAuth

by raditotev

Identity and auth for AI agents: credentials, tokens, delegations, and permission checks.

62 installs/wk local only

Trust Gate

by cwnapps

Post-quantum, tamper-evident receipts for agent actions. Ed25519 + ML-DSA-65, offline verify.

4 tools answering

Ccs

by correctover

Runtime verification MCP server: fail-closed checks for agent tool calls, signed evidence receipts.

local only

Gateway — questions

Answers built from our own checks of this server.

Why is there no uptime for Gateway?

Gateway runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @bolyra/gateway was installed 97 times last week.

How do I connect Gateway?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @bolyra/gateway straight from npm; nothing to host, nothing to sign up for.

How many people use Gateway?

The npm package @bolyra/gateway was installed 97 times in the last week. Week over week that is +424%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Gateway open source?

Yes — it is published under the Apache-2.0 licence, written in TypeScript, 0 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.