Is io.github.PanosSalt/MCP-Gateway safe to use?

io.github.PanosSalt/MCP-Gateway has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.PanosSalt/MCP-Gateway?

io.github.PanosSalt/MCP-Gateway supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.PanosSalt/MCP-Gateway do?

io.github.PanosSalt/MCP-Gateway provides 10 tools: get_schema, execute_sql, fs_read_file, fs_list_directory, fs_directory_tree and 5 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.PanosSalt/MCP-Gateway?

io.github.PanosSalt/MCP-Gateway is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.PanosSalt/MCP-Gateway actively maintained?

io.github.PanosSalt/MCP-Gateway is recently maintained - last commit was 47 days ago. It has 6 GitHub stars.

io.github.PanosSalt/MCP-Gateway

mcp-remote

Multi-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging.

6 10 tools GitHub npm

No known CVEs

MIT license

Maintained

Last commit 47d ago

Works with most clients

Transport: stdio, sse, http

10 tools · ~393 tok

Grade A · 0.2% of 200K ctx

MCPpedia last refreshed this data 2d ago

Edit this pageView history

io.github.PanosSalt/MCP-Gateway is an MCP server that multi-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 82/100 on MCPpedia's security, maintenance and efficiency rubric.

Security DevOps

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "my-org-gateway": {
      "args": [
        "-y",
        "mcp-remote",
        "http://localhost:8000/t/my-org/mcp/sse"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-panossalt-mcp-gateway)](https://mcppedia.org/s/io-github-panossalt-mcp-gateway)

Read me

What io.github.PanosSalt/MCP-Gateway does

Multi-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'mcp-remote' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2025-6514critical · fixedCVSS 9.6

mcp-remote exposed to OS command injection via untrusted MCP server connections

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

Affected: >= 0.0.5Fixed in 0.1.16source →

Inventory

Tools (10)

Click any tool to inspect its schema.

~393 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.PanosSalt/MCP-Gateway safe to use?: io.github.PanosSalt/MCP-Gateway has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.PanosSalt/MCP-Gateway?: io.github.PanosSalt/MCP-Gateway supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.PanosSalt/MCP-Gateway do?: io.github.PanosSalt/MCP-Gateway provides 10 tools: get_schema, execute_sql, fs_read_file, fs_list_directory, fs_directory_tree and 5 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.PanosSalt/MCP-Gateway?: io.github.PanosSalt/MCP-Gateway is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.PanosSalt/MCP-Gateway actively maintained?: io.github.PanosSalt/MCP-Gateway is recently maintained - last commit was 47 days ago. It has 6 GitHub stars.

Similar servers

Others in security / devops

View all →

Mcp Gitlab96

MCP server for using the GitLab API

2.1k 12

io.github.vmoranv/jshookmcp95

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

2.1k 2

io.github.zenml-io/mcp-zenml93

MCP server for discovering, reading, and changing ZenML resources with compact generic tools

49 17

io.github.CakeRepository/1password92

MCP server for 1Password service accounts — tools and resources for vaults and credentials

22 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.PanosSalt/MCP-Gateway and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security DevOps

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "my-org-gateway": {
      "args": [
        "-y",
        "mcp-remote",
        "http://localhost:8000/t/my-org/mcp/sse"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-panossalt-mcp-gateway)](https://mcppedia.org/s/io-github-panossalt-mcp-gateway)

Read me

What io.github.PanosSalt/MCP-Gateway does

Multi-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'mcp-remote' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

MCP Gateway

The production platform for MCP tools.

Claude Desktop can connect to your internal tools — databases, filesystems, APIs, anything — through a single authenticated endpoint. You control who can use which tools, every action is logged, and no raw credentials ever leave your server.

Built-in tools: SQL query (Postgres, MySQL, SQLite, MSSQL), filesystem access. Custom tools: plug in anything that implements the MCP tool interface.

See it in action — short demo of Claude Desktop querying a database through MCP Gateway.

Overview
Features
Architecture
Quick Start
Configuration
Authentication
API Reference
MCP Integration
Role-Based Access Control
Entra ID / SSO
Development
Troubleshooting
Security
Additional Documentation

Overview

MCP Gateway sits between AI assistants and your databases. It:

Authenticates users via password login, Microsoft Entra ID (Azure AD), or API keys
Enforces role-based access control (viewer / analyst / admin)
Exposes databases as MCP tools that AI assistants can discover and call
Translates natural language questions into SQL via Claude, executes queries, and summarizes results
Logs all activity to a structured audit trail

Claude Desktop / mcp-remote
        │
        │ MCP over SSE (OAuth 2.1 + PKCE)
        ▼
┌─────────────────────────────────────────────────────────┐
│                      MCP Gateway                        │
│                                                         │
│  ┌──────────┐  ┌──────────┐  ┌───────────────────────┐ │
│  │ Auth /   │  │  Admin   │  │   MCP SSE Endpoint    │ │
│  │ OAuth    │  │   UI     │  │  /t/{slug}/mcp/sse    │ │
│  └──────────┘  └──────────┘  └───────────────────────┘ │
│                                          │              │
│  ┌──────────────────────────────────────┐│              │
│  │         Tool Providers               ││              │
│  │  sql.py → get_schema / execute_sql   ││              │
│  └──────────────────────────────────────┘│              │
└─────────────────────────────────────────┼───────────────┘
                                          │ Decrypted DSN
                    ┌─────────────────────┼────────────────┐
                    │   Your Databases    │                │
                    │  Postgres  MySQL  MSSQL  SQLite      │
                    └────────────────────────────────────  ┘

What you get out of the box

For your organisation

One URL for Claude Desktop — users authenticate once, access everything they're allowed
Microsoft Entra ID SSO — roles assigned automatically from Azure AD groups
Full audit trail — every tool call, every query, every login, who did what and when

For your tools

Drop any MCP tool into the gateway and it inherits auth, RBAC, and logging automatically
Per-tool role overrides — restrict SQL execution to analysts, filesystem writes to admins
Bundled: SQL tools (4 databases), filesystem tools (read, write, search, tree)

For your security team

No credentials on employee machines
Tenant isolation — org A cannot see org B's tools or data
API keys for CI/CD, OAuth 2.1 + PKCE for human users

Supported Databases

Database	Driver	DSN Format
PostgreSQL	psycopg2	`postgresql://user:pass@host/db`
MySQL / MariaDB	PyMySQL	`mysql+pymysql://user:pass@host/db`
Microsoft SQL Server	pymssql	`mssql+pyms

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2025-6514critical · fixedCVSS 9.6

mcp-remote exposed to OS command injection via untrusted MCP server connections

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

Affected: >= 0.0.5Fixed in 0.1.16source →

Inventory

Tools (10)

Click any tool to inspect its schema.

~393 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.PanosSalt/MCP-Gateway safe to use?: io.github.PanosSalt/MCP-Gateway has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.PanosSalt/MCP-Gateway?: io.github.PanosSalt/MCP-Gateway supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.PanosSalt/MCP-Gateway do?: io.github.PanosSalt/MCP-Gateway provides 10 tools: get_schema, execute_sql, fs_read_file, fs_list_directory, fs_directory_tree and 5 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.PanosSalt/MCP-Gateway?: io.github.PanosSalt/MCP-Gateway is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.PanosSalt/MCP-Gateway actively maintained?: io.github.PanosSalt/MCP-Gateway is recently maintained - last commit was 47 days ago. It has 6 GitHub stars.

Similar servers

Others in security / devops

View all →

Mcp Gitlab96

MCP server for using the GitLab API

2.1k 12

io.github.vmoranv/jshookmcp95

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

2.1k 2

io.github.zenml-io/mcp-zenml93

MCP server for discovering, reading, and changing ZenML resources with compact generic tools

49 17

io.github.CakeRepository/1password92

MCP server for 1Password service accounts — tools and resources for vaults and credentials

22 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.PanosSalt/MCP-Gateway and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

io.github.PanosSalt/MCP-Gateway

Install in your client

What io.github.PanosSalt/MCP-Gateway does

Test This Server

Why this score

82/100across 5 weighted dimensions

Security

Tools (10)

Reviews

Frequently Asked Questions

Similar servers

Discussion

io.github.PanosSalt/MCP-Gateway

Install in your client

What io.github.PanosSalt/MCP-Gateway does

Test This Server

MCP Gateway

Table of Contents

Overview

What you get out of the box

Supported Databases

Why this score

82/100across 5 weighted dimensions

Security

Tools (10)

Reviews

Frequently Asked Questions

Similar servers

Discussion

MCP Gateway

Table of Contents

Overview

What you get out of the box

Supported Databases