Is dev.stackbilt.mcp/gateway safe to use?

dev.stackbilt.mcp/gateway has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install dev.stackbilt.mcp/gateway?

dev.stackbilt.mcp/gateway supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can dev.stackbilt.mcp/gateway do?

dev.stackbilt.mcp/gateway provides 16 tools: scaffold_create, scaffold_classify, scaffold_publish, scaffold_deploy, scaffold_import and 11 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with dev.stackbilt.mcp/gateway?

dev.stackbilt.mcp/gateway is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is dev.stackbilt.mcp/gateway actively maintained?

dev.stackbilt.mcp/gateway is actively maintained — last commit was 7 days ago.

dev.stackbilt.mcp/gateway

wrangler

Stackbilt platform MCP gateway — wireframe generation and stack scaffolding tools

22.0M/wk 16 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 7d ago

Works with most clients

Transport: stdio, sse, http

16 tools · ~685 tok

Grade B · 0.3% of 200K ctx

Edit this pageView history

Developer Tools Design

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "dev-stackbilt-mcp-gateway": {
      "args": [
        "-y",
        "wrangler"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/dev-stackbilt-mcp-gateway)](https://mcppedia.org/s/dev-stackbilt-mcp-gateway)

Read me

What dev.stackbilt.mcp/gateway does

MCP Registry: dev.stackbilt.mcp/gateway — published on the Official MCP Registry

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'wrangler' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

88/100across 5 weighted dimensions

How we score →

0255075100

−12

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

4 fixed

CVE-2026-0933medium · fixedCVSS 4

Wrangler affected by OS Command Injection in `wrangler pages deploy`

**Summary** A command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. **Root cause** The `commitHash` variable, derived from user input via the `--commit-hash` CLI argument, is interpolated directl

Affected: >= 2.0.15Fixed in 3.114.17source →

CVE-2023-7080low · fixedCVSS 3.1

Arbitrary remote code execution within `wrangler dev` Workers sandbox

### Impact The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. `wrangler dev` would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect to the inspector and run arbitrary code. Additionally, the inspector server did not validate `Origin`/`Host` headers, granting an attacker that can trick any user on the local network into opening a malicious website the ability

Affected: >= 3.0.0Fixed in 3.19.0source →

CVE-2023-7079low · fixedCVSS 3.1

Arbitrary remote file read in Wrangler dev server

### Impact Sending specially crafted HTTP requests and inspector messages to Wrangler's dev server could result in any file on the user's computer being accessible over the local network. An attacker that could trick any user on the local network into opening a malicious website could also read any file. ### Patches This issue was fixed in `wrangler@3.19.0`. Wrangler will now only serve files that are part of your bundle, or referenced by your bundle's source maps. ### Workarounds Configure Wr

Affected: >= 3.9.0Fixed in 3.19.0source →

CVE-2023-3348low · fixedCVSS 3.1

Cloudflare Wrangler directory traversal vulnerability

### Impact The Wrangler command line tool (<=wrangler@3.1.0 or <=wrangler@2.20.1) was affected by a directory traversal vulnerability when running a local development server for Pages (wrangler pages dev command). This vulnerability enabled an attacker in the same network as the victim to connect to the local development server and access the victim's files present outside of the directory for the development server. ### Patches Wrangler2: Upgrade to v2.20.1 or higher. Wrangler3: Upgrade to v3

Affected: >= 0Fixed in 2.20.1source →

Inventory

Tools (16)

Click any tool to inspect its schema.

~685 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is dev.stackbilt.mcp/gateway safe to use?: dev.stackbilt.mcp/gateway has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install dev.stackbilt.mcp/gateway?: dev.stackbilt.mcp/gateway supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can dev.stackbilt.mcp/gateway do?: dev.stackbilt.mcp/gateway provides 16 tools: scaffold_create, scaffold_classify, scaffold_publish, scaffold_deploy, scaffold_import and 11 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with dev.stackbilt.mcp/gateway?: dev.stackbilt.mcp/gateway is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is dev.stackbilt.mcp/gateway actively maintained?: dev.stackbilt.mcp/gateway is actively maintained — last commit was 7 days ago.

Similar servers

Others in developer-tools / design

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.8k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

5.8k 1

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

Figma Console Mcp96

MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode

1.7k 2

MCP Security Weekly

Get CVE alerts and security updates for dev.stackbilt.mcp/gateway and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools Design

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "dev-stackbilt-mcp-gateway": {
      "args": [
        "-y",
        "wrangler"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/dev-stackbilt-mcp-gateway)](https://mcppedia.org/s/dev-stackbilt-mcp-gateway)

Read me

What dev.stackbilt.mcp/gateway does

MCP Registry: dev.stackbilt.mcp/gateway — published on the Official MCP Registry

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'wrangler' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Stackbilt MCP Gateway

Two products. One MCP connection. Image generated by img-forge (ultra tier).

MCP Registry: dev.stackbilt.mcp/gateway — published on the Official MCP Registry

OAuth-authenticated Model Context Protocol (MCP) gateway for Stackbilt platform services. Built as a Cloudflare Worker using @cloudflare/workers-oauth-provider.

What It Does

A single MCP endpoint (mcp.stackbilt.dev/mcp) that routes tool calls to multiple backend product workers:

Backend	Tools	Description
TarotScript	`scaffold_create`, `scaffold_classify`, `scaffold_publish`, `scaffold_deploy`, `scaffold_import`, `scaffold_status`	Deterministic project scaffolding, n8n workflow import, GitHub publishing, CF deployment
img-forge	`image_generate`, `image_list_models`, `image_check_job`	AI image generation (5 quality tiers)
Stackbilder (TarotScript backend)	`flow_create`, `flow_status`, `flow_summary`, `flow_quality`, `flow_governance`, `flow_advance`, `flow_recover`	DEPRECATED — Architecture flow orchestration (migrating to `scaffold_*`)

The Scaffold Pipeline (E2E)

You: "Build a restaurant menu API with D1 storage"
  ↓
scaffold_create → structured facts + 9 deployable project files
  ↓
scaffold_publish → GitHub repo with atomic initial commit
  ↓
git clone → npm install → npx wrangler deploy → live Worker

Zero LLM calls for file generation. ~20ms for structure, ~2s with oracle prose. 21x faster than flow_create.

Key Features

OAuth 2.1 with PKCE — GitHub SSO, Google SSO, and email/password authentication
Backend adapter pattern — tool catalogs aggregated from multiple service bindings, namespaced to avoid collisions
Per-tier rate limiting — fixed-window per-tenant limits via RATELIMIT_KV (free=20/min, hobby=60, pro=300, enterprise=1000); 429 with Retry-After and X-RateLimit-* headers
Cost attribution & quota — every tool call carries a credit cost; quota is reserved via edge-auth before dispatch and committed/refunded on outcome; image_generate cost scales with the effective quality tier (1×/1×/3×/5×/8× for draft/standard/premium/ultra/ultra_plus); when model is set it takes billing precedence over quality_tier
Scope + tier enforcement — tools/list is filtered by token scopes; tools/call requires the generate scope for mutating tools; expensive image_generate quality tiers (premium and above) are gated to Pro+ plans; specifying model directly enforces the same gate via model→tier mapping
Security Constitution compliance — every tool declares a risk level (READ_ONLY, LOCAL_MUTATION, EXTERNAL_MUTATION); structured audit logging with secret redaction; HMAC-signed identity tokens
Coming-soon gate — PUBLIC_SIGNUPS_ENABLED flag to control public access
MCP JSON-RPC over HTTP — supports both streaming (SSE) and request/response transport

Quick Start

Prerequisites

Node.js 18+
Wrangler CLI (npm i -g wrangler)
Cloudflare account with the required service bindings configured

Install & Run

npm install
npm run dev

Run Tests

npm test

Deploy

npm run deploy

Deploys to the mcp.stackbilt.dev custom domain via Cloudflare Workers.

Environment Variables & Secrets

Name	Type	Description
`SERVICE_BINDING_SECRET`

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

88/100across 5 weighted dimensions

How we score →

0255075100

−12

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

4 fixed

CVE-2026-0933medium · fixedCVSS 4

Wrangler affected by OS Command Injection in `wrangler pages deploy`

Affected: >= 2.0.15Fixed in 3.114.17source →

CVE-2023-7080low · fixedCVSS 3.1

Arbitrary remote code execution within `wrangler dev` Workers sandbox

Affected: >= 3.0.0Fixed in 3.19.0source →

CVE-2023-7079low · fixedCVSS 3.1

Arbitrary remote file read in Wrangler dev server

Affected: >= 3.9.0Fixed in 3.19.0source →

CVE-2023-3348low · fixedCVSS 3.1

Cloudflare Wrangler directory traversal vulnerability

Affected: >= 0Fixed in 2.20.1source →

Inventory

Tools (16)

Click any tool to inspect its schema.

~685 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is dev.stackbilt.mcp/gateway safe to use?: dev.stackbilt.mcp/gateway has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install dev.stackbilt.mcp/gateway?: dev.stackbilt.mcp/gateway supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can dev.stackbilt.mcp/gateway do?: dev.stackbilt.mcp/gateway provides 16 tools: scaffold_create, scaffold_classify, scaffold_publish, scaffold_deploy, scaffold_import and 11 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with dev.stackbilt.mcp/gateway?: dev.stackbilt.mcp/gateway is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is dev.stackbilt.mcp/gateway actively maintained?: dev.stackbilt.mcp/gateway is actively maintained — last commit was 7 days ago.

Similar servers

Others in developer-tools / design

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.8k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

5.8k 1

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

Figma Console Mcp96

MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode

1.7k 2

MCP Security Weekly

Get CVE alerts and security updates for dev.stackbilt.mcp/gateway and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?