MCP Context Forge

Name: MCP Context Forge
Author: IBM

Official

@modelcontextprotocol/inspector · by IBM

An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.

4.7k 20 tools GitHub npm PyPI

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, sse, http

20 tools · ~606 tok

Grade B · 0.3% of 200K ctx

MCPpedia last refreshed this data 1d ago

Edit this pageView history

MCP Context Forge is an MCP server that an AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 85/100 on MCPpedia's security, maintenance and efficiency rubric.

Developer Tools AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcpgateway-wrapper": {
      "env": {
        "MCP_AUTH": "Bearer your-token-here",
        "MCP_SERVER_URL": "http://localhost:4444/servers/UUID_OF_SERVER_1",
        "MCP_TOOL_CALL_TIMEOUT": "120"
      },
      "args": [
        "-m",
        "mcpgateway.wrapper"
      ],
      "command": "python"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/mcp-context-forge)](https://mcppedia.org/s/mcp-context-forge)

Read me

What Mcp Context Forge does

An open source registry and proxy that federates MCP, A2A, and REST/gRPC APIs with centralized governance, discovery, and observability. Optimizes Agent & Tool calling, and supports plugins.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

85/100across 5 weighted dimensions

How we score →

0255075100

−15

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

5 fixed

CVE-2026-53710critical · fixedCVSS 10

mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

**Commit:** `f855e54d5b7bc1c91b977574a03b91eff6b86bb6` **Component:** `mcp-servers/python/python_sandbox_server/src/python_sandbox_server/server_fastmcp.py` ## Vulnerability RestrictedPython's sandbox in ContextForge's `python_sandbox_server` sub-project allows arbitrary Python execution via three compounding weaknesses: 1. Raw `getattr` is exposed in `safe_builtins`, bypassing `_getattr_` mediation. 2. `validate_code` checks for literal dangerous dunder strings, but the payload constructs th

Affected: >= 0Fixed in 1.0.2source →

GHSA-vwf3-4xxj-qg6hhigh · fixed

mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

### Summary `mcpgateway.services.prompt_service.PromptService` renders user-supplied prompt templates using Jinja2's plain `Environment()` rather than `SandboxedEnvironment`. An authenticated user with permission to register or update prompt templates can store a malicious template that, on subsequent rendering, executes arbitrary Python code on the gateway host with the privileges of the gateway process. This is a Server-Side Template Injection (SSTI) vulnerability leading to Remote Code Execu

Affected: >= 0Fixed in 1.0.0source →

CVE-2026-53708medium · fixedCVSS 6.6

ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

## Summary The `/admin/gateways/test` endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable via DNS rebinding. The source code explicitly acknowledges this limitation in two separate locations. ## Details `validate_gateway_test_url()` in `mcpgateway/common/validators.py` (lines 1527–17

Affected: >= 0Fixed in 1.0.3source →

CVE-2025-58444high · fixed

MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server

An XSS flaw exists in the MCP Inspector local development tool when it renders a redirect URL returned by a remote MCP server. If the Inspector connects to an untrusted server, a crafted redirect can inject script into the Inspector context and, via the built-in proxy, be leveraged to trigger arbitrary command execution on the developer machine. Version 0.16.6 hardens URL handling/validation and prevents script execution. > Thank you to the following researchers for their reports and contributi

Affected: >= 0Fixed in 0.16.6source →

CVE-2025-49596critical · fixed

MCP Inspector proxy server lacks authentication between the Inspector client and proxy

Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio. Users should immediately upgrade to version 0.14.1 or later to address these vulnerabilities. Credit: Rémy Marot <bughunters@tenable.com>

Affected: >= 0Fixed in 0.14.1source →

Inventory

Tools (20)

Click any tool to inspect its schema.

~606 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Mcp Context Forge safe to use?: Mcp Context Forge has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install Mcp Context Forge?: Mcp Context Forge supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Mcp Context Forge do?: Mcp Context Forge provides 20 tools: Prompts, Resources, Tools, PostgreSQL, ContextForge and 15 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Mcp Context Forge?: Mcp Context Forge is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Mcp Context Forge actively maintained?: Mcp Context Forge is actively maintained - last commit was 1 day ago. It has 4,673 GitHub stars.

Similar servers

Others in developer-tools / ai-ml

View all →

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.5k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.5k 1

io.github.callstack/agent-device96

MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps

5.1k 5

io.github.HUANGCHIHHUNGLeo/claude-real-video96

Let any LLM watch a video locally — and search everything it has ever watched.

2.2k 6

MCP Security Weekly

Get CVE alerts and security updates for Mcp Context Forge and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

{ "mcpServers": { "mcpgateway-wrapper": { "env": { "MCP_AUTH": "Bearer your-token-here", "MCP_SERVER_URL": "http://localhost:4444/servers/UUID_OF_SERVER_1", "MCP_TOOL_CALL_TIMEOUT": "120" }, "args": [ "-m", "mcpgateway.wrapper" ], "command": "python" } } }

Frequently Asked Questions

Is Mcp Context Forge safe to use?

Mcp Context Forge has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.

How do I install Mcp Context Forge?

Mcp Context Forge supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Mcp Context Forge do?

Mcp Context Forge provides 20 tools: Prompts, Resources, Tools, PostgreSQL, ContextForge and 15 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Mcp Context Forge?

Mcp Context Forge is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Mcp Context Forge actively maintained?

Mcp Context Forge is actively maintained - last commit was 1 day ago. It has 4,673 GitHub stars.