Is io.github.PanosSalt/MCP-Gateway safe to use?

io.github.PanosSalt/MCP-Gateway has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.PanosSalt/MCP-Gateway?

io.github.PanosSalt/MCP-Gateway supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.PanosSalt/MCP-Gateway do?

io.github.PanosSalt/MCP-Gateway provides 10 tools: get_schema, execute_sql, fs_read_file, fs_list_directory, fs_directory_tree and 5 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.PanosSalt/MCP-Gateway?

io.github.PanosSalt/MCP-Gateway is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.PanosSalt/MCP-Gateway actively maintained?

io.github.PanosSalt/MCP-Gateway is less actively maintained — last commit was 119 days ago. It has 6 GitHub stars.

io.github.PanosSalt/MCP-Gateway

mcp-remote

Multi-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging.

6 414.2k/wk 10 tools GitHub npm

No known CVEs

No license

Maintained

Last commit 119d ago

Works with most clients

Transport: stdio, sse, http

10 tools · ~393 tok

Grade A · 0.2% of 200K ctx

Edit this pageView history

Security DevOps

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "my-org-gateway": {
      "args": [
        "-y",
        "mcp-remote",
        "http://localhost:8000/t/my-org/mcp/sse"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-panossalt-mcp-gateway)](https://mcppedia.org/s/io-github-panossalt-mcp-gateway)

Read me

What io.github.PanosSalt/MCP-Gateway does

Claude Desktop can connect to your internal tools — databases, filesystems, APIs, anything — through a single authenticated endpoint. You control who can use which tools, every action is logged, and no raw credentials ever leave your server.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'mcp-remote' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2025-6514critical · fixedCVSS 9.6

mcp-remote exposed to OS command injection via untrusted MCP server connections

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

Affected: >= 0.0.5Fixed in 0.1.16source →

Inventory

Tools (10)

Click any tool to inspect its schema.

~393 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.PanosSalt/MCP-Gateway safe to use?: io.github.PanosSalt/MCP-Gateway has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.PanosSalt/MCP-Gateway?: io.github.PanosSalt/MCP-Gateway supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.PanosSalt/MCP-Gateway do?: io.github.PanosSalt/MCP-Gateway provides 10 tools: get_schema, execute_sql, fs_read_file, fs_list_directory, fs_directory_tree and 5 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.PanosSalt/MCP-Gateway?: io.github.PanosSalt/MCP-Gateway is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.PanosSalt/MCP-Gateway actively maintained?: io.github.PanosSalt/MCP-Gateway is less actively maintained — last commit was 119 days ago. It has 6 GitHub stars.

Similar servers

Others in security / devops

View all →

Mcp Gitlab94

MCP server for using the GitLab API

1.7k 12

Ida Pro Mcp90

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

9.8k 3

Mcpki Server90

mcpki-server is the backend infrastructure for https://www.mcpki.org, enabling secure public key management and autonomous certificate handling for large language models (LLMs).

Mcp Server Kubernetes90

MCP Server for kubernetes management commands

1.4k 22

MCP Security Weekly

Get CVE alerts and security updates for io.github.PanosSalt/MCP-Gateway and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security DevOps

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "my-org-gateway": {
      "args": [
        "-y",
        "mcp-remote",
        "http://localhost:8000/t/my-org/mcp/sse"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-panossalt-mcp-gateway)](https://mcppedia.org/s/io-github-panossalt-mcp-gateway)

Read me

What io.github.PanosSalt/MCP-Gateway does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'mcp-remote' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

MCP Gateway

The production platform for MCP tools.

Built-in tools: SQL query (Postgres, MySQL, SQLite, MSSQL), filesystem access. Custom tools: plug in anything that implements the MCP tool interface.

See it in action — short demo of Claude Desktop querying a database through MCP Gateway.

Overview
Features
Architecture
Quick Start
Configuration
Authentication
API Reference
MCP Integration
Role-Based Access Control
Entra ID / SSO
Development
Troubleshooting
Security
Additional Documentation

Overview

MCP Gateway sits between AI assistants and your databases. It:

Authenticates users via password login, Microsoft Entra ID (Azure AD), or API keys
Enforces role-based access control (viewer / analyst / admin)
Exposes databases as MCP tools that AI assistants can discover and call
Translates natural language questions into SQL via Claude, executes queries, and summarizes results
Logs all activity to a structured audit trail

Claude Desktop / mcp-remote
        │
        │ MCP over SSE (OAuth 2.1 + PKCE)
        ▼
┌─────────────────────────────────────────────────────────┐
│                      MCP Gateway                        │
│                                                         │
│  ┌──────────┐  ┌──────────┐  ┌───────────────────────┐ │
│  │ Auth /   │  │  Admin   │  │   MCP SSE Endpoint    │ │
│  │ OAuth    │  │   UI     │  │  /t/{slug}/mcp/sse    │ │
│  └──────────┘  └──────────┘  └───────────────────────┘ │
│                                          │              │
│  ┌──────────────────────────────────────┐│              │
│  │         Tool Providers               ││              │
│  │  sql.py → get_schema / execute_sql   ││              │
│  └──────────────────────────────────────┘│              │
└─────────────────────────────────────────┼───────────────┘
                                          │ Decrypted DSN
                    ┌─────────────────────┼────────────────┐
                    │   Your Databases    │                │
                    │  Postgres  MySQL  MSSQL  SQLite      │
                    └────────────────────────────────────  ┘

What you get out of the box

For your organisation

One URL for Claude Desktop — users authenticate once, access everything they're allowed
Microsoft Entra ID SSO — roles assigned automatically from Azure AD groups
Full audit trail — every tool call, every query, every login, who did what and when

For your tools

Drop any MCP tool into the gateway and it inherits auth, RBAC, and logging automatically
Per-tool role overrides — restrict SQL execution to analysts, filesystem writes to admins
Bundled: SQL tools (4 databases), filesystem tools (read, write, search, tree)

For your security team

No credentials on employee machines
Tenant isolation — org A cannot see org B's tools or data
API keys for CI/CD, OAuth 2.1 + PKCE for human users

Supported Databases

Database	Driver	DSN Format
PostgreSQL	psycopg2	`postgresql://user:pass@host/db`
MySQL / MariaDB	PyMySQL	`mysql+pymysql://user:pass@host/db`
Microsoft SQL Server	pymssql	`mssql+pyms

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2025-6514critical · fixedCVSS 9.6

mcp-remote exposed to OS command injection via untrusted MCP server connections

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

Affected: >= 0.0.5Fixed in 0.1.16source →

Inventory

Tools (10)

Click any tool to inspect its schema.

~393 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.PanosSalt/MCP-Gateway safe to use?: io.github.PanosSalt/MCP-Gateway has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.PanosSalt/MCP-Gateway?: io.github.PanosSalt/MCP-Gateway supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.PanosSalt/MCP-Gateway do?: io.github.PanosSalt/MCP-Gateway provides 10 tools: get_schema, execute_sql, fs_read_file, fs_list_directory, fs_directory_tree and 5 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.PanosSalt/MCP-Gateway?: io.github.PanosSalt/MCP-Gateway is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.PanosSalt/MCP-Gateway actively maintained?: io.github.PanosSalt/MCP-Gateway is less actively maintained — last commit was 119 days ago. It has 6 GitHub stars.

Similar servers

Others in security / devops

View all →

Mcp Gitlab94

MCP server for using the GitLab API

1.7k 12

Ida Pro Mcp90

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

9.8k 3

Mcpki Server90

mcpki-server is the backend infrastructure for https://www.mcpki.org, enabling secure public key management and autonomous certificate handling for large language models (LLMs).

Mcp Server Kubernetes90

MCP Server for kubernetes management commands

1.4k 22

MCP Security Weekly

Get CVE alerts and security updates for io.github.PanosSalt/MCP-Gateway and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

io.github.PanosSalt/MCP-Gateway

Install in your client

What io.github.PanosSalt/MCP-Gateway does

Test This Server

Why this score

81/100across 5 weighted dimensions

Security

Tools (10)

Reviews

Frequently Asked Questions

Similar servers

Discussion

io.github.PanosSalt/MCP-Gateway

Install in your client

What io.github.PanosSalt/MCP-Gateway does

Test This Server

MCP Gateway

Table of Contents

Overview

What you get out of the box

Supported Databases

Why this score

81/100across 5 weighted dimensions

Security

Tools (10)

Reviews

Frequently Asked Questions

Similar servers

Discussion

MCP Gateway

Table of Contents

Overview

What you get out of the box

Supported Databases