Announcing Beacon: Self-improving memory for coding agents

← All MCP servers

MCP server

MCP Gateway

mcp:mikkoparkkola/mcp-gateway

Universal MCP gateway with Meta-MCP discovery, routing, and REST API capabilities.

awesome-mcp-servers Glama MCP Registry

Verdict

Not analyzed

Indexed from the registries, but not analyzed yet. Lineage and listings below are current.

Execution chain 166

What it calls, runs, installs, reads and writes, with the line that does it.

Environment variables 2

ED25519_PUBKEY

tools/agent-bus-demo.sh:102 · read

VERIFY_LINES

tools/agent-bus-demo.sh:179 · read

Commands run 14

<dynamic>

npm/run.js:82 · process

COUNT=$(echo "$POLL_RESULT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(len(d[0].get('result',[])))" 2>/dev/null || echo 0)

tools/agent-bus-demo.sh:148 · pipe_to_shell

CURSOR=$(python3 -c "from datetime import datetime, timezone; print(datetime.now(timezone.utc).isoformat())")

tools/agent-bus-demo.sh:115 · dynamic_code

DELETED=$(echo "$CLEAN_RESULT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d[0]['result']['deleted'])" 2>/dev/null || echo "?")

tools/agent-bus-demo.sh:212 · dynamic_code

git -C {…} {…}

scripts/dev/check-control-drift.py:185 · process

if ! echo "$PUB_RESULT" | python3 -c "import sys,json; d=json.load(sys.stdin); assert d[0]['status']=='OK'" 2>/dev/null; then

tools/agent-bus-demo.sh:131 · pipe_to_shell

if echo "$INVALID_RESULT" | python3 -c "import sys,json; d=json.load(sys.stdin); assert d[0]['status']=='OK'" 2>/dev/null; then

tools/agent-bus-demo.sh:202 · pipe_to_shell

merge-base

scripts/dev/check-control-drift.py:197 · via:git

MSG_ID="demo-$(python3 -c 'import random,string; print("".join(random.choices(string.ascii_lowercase+string.digits,k=8)))')"

tools/agent-bus-demo.sh:120 · dynamic_code

rev-parse

scripts/dev/check-control-drift.py:193 · via:git

T0=$(python3 -c "import time; print(int(time.time()*1000))")

tools/agent-bus-demo.sh:124 · dynamic_code

T1=$(python3 -c "import time; print(int(time.time()*1000))")

tools/agent-bus-demo.sh:156 · dynamic_code

THIRD_COUNT=$(echo "$THIRD_RESULT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(len(d[0].get('result',[])))" 2>/dev/null || echo 0)

tools/agent-bus-demo.sh:191 · dynamic_code

VERIFY_INPUT=$(echo "$POLL_RESULT" | python3 -c "

tools/agent-bus-demo.sh:167 · pipe_to_shell

Files read 20

.claude/skills

src/skills/installer.rs:304 · literal

.codex/config.json

src/discovery/config_scanner.rs:653 · literal

.env

src/attestation/wiring.rs:140 · literal

/etc/passwd

src/security/firewall/input_scanner.rs:398 · literal

/etc/shadow

src/runtime/provision_tests.rs:157 · literal

/home/user/.claude/secrets.env

src/config_reload/tests.rs:465 · literal

/nonexistent/path/.env

src/config/tests.rs:107 · literal

<dynamic>

scripts/dev/check-control-drift.py:75 · read

~/.aws

src/validator/rules/tool_poisoning.rs:82 · literal

~/.claude/secrets.env

src/config/tests.rs:156 · literal

~/.ssh

src/validator/rules/tool_poisoning.rs:81 · literal

~/.ssh/

src/security/firewall/input_scanner.rs:98 · literal

file:///etc/passwd

src/security/ssrf/tests.rs:408 · literal

id_ed25519

src/validator/rules/tool_poisoning.rs:85 · literal

id_rsa

src/validator/rules/tool_poisoning.rs:84 · literal

keychain

src/discovery/shadow/helpers.rs:25 · literal

Keychain lookup failed

src/secrets.rs:133 · literal

keychain:

src/capability/executor/credentials.rs:228 · literal

keychain:my-api-key

src/capability/parser.rs:205 · literal

keychain.

src/capability/validator/checks.rs:485 · literal

Files written 3

<dynamic>

npm/run.js:43 · write

=

tools/agent-bus-demo.sh:221 · write

$since_ts

tools/agent-bus-demo.sh:147 · write

GitHub repositories 12

a2aproject/a2a-spec

src/a2a/types.rs:12 · url

aximpact/axterminator

capabilities/automation/desktop_event_bus.yaml:113 · url

cisco/mcp-scanner

capabilities/security/cisco_scanner.yaml:82 · url

florianwil662/pyghidra-mcp

capabilities/security/pyghidra_reverse.yaml:87 · url

hackernews/api

capabilities/knowledge/hackernews_ask.yaml:43 · url

internetarchive/wayback

capabilities/knowledge/wayback_cdx.yaml:94 · url

jmcentire/pact

capabilities/verification/pact_contracts.yaml:75 · url

lukepeavey/quotable

capabilities/entertainment/random_quote.yaml:67 · url

mikkoparkkola/mcp-gateway

AUTHORSHIP.md:67 · url

modelcontextprotocol/mcp-gateway

src/gateway/ui/index.html:1388 · url

open-pencil/open-pencil

capabilities/productivity/openpencil_design.yaml:99 · url

rust-lang/crates.io-index

Cargo.lock:8 · url

Host config written 11

.claude.json

src/commands/config_export/mod.rs:394 · literal

.config/Claude/claude_desktop_config.json

src/commands/paths.rs:23 · literal

.continue/config.json

src/discovery/config_scanner.rs:646 · literal

.cursor/mcp.json

src/commands/config_export/mod.rs:404 · literal

/opt/node js/bin/npm

src/transport/stdio_cache_tests.rs:100 · literal

/root/.npmrc

src/transport/stdio_cache_tests.rs:518 · literal

/tmp/claude_desktop_config.json

src/discovery/shadow/tests.rs:89 · literal

/usr/local/bin/npx -y pkg

src/transport/stdio_cache_tests.rs:65 · literal

AppData/Roaming/Claude/claude_desktop_config.json

src/commands/paths.rs:25 · literal

claude_desktop_config.json

src/commands/paths.rs:56 · literal

Library/Application Support/Claude/claude_desktop_config.json

src/commands/paths.rs:21 · literal

Install hooks 1

postinstall: node run.js --install

npm/package.json:34 · package.json

Network calls 50

<dynamic>

npm/run.js:37 · via:download

$

src/config_reload/tests.rs:2608 · url_literal

0.0.0.0

src/security/ssrf/tests.rs:330 · url_literal

0.1.2.3

src/security/ssrf/tests.rs:331 · url_literal

0x7f.0.0.1

src/gateway/router/well_known.rs:466 · url_literal

1.1.1.1

src/capability/openapi/tests.rs:494 · url_literal

10.0.0.1

src/capability/execution_context.rs:386 · url_literal

10.0.0.5

src/main_tests.rs:930 · url_literal

127.0.0.1

src/capability/backend.rs:806 · url_literal

127.0.0.1.evil.com

src/transport/http/tests.rs:1813 · url_literal

127.0.0.2

src/config/mod.rs:2119 · url_literal

127.1

src/gateway/router/well_known.rs:468 · url_literal

127.attacker.example.com

src/discovery/shadow/tests.rs:362 · url_literal

168.63.129.16

src/security/ssrf/tests.rs:336 · url_literal

169.254.169.254

src/capability/openapi/tests.rs:17 · url_literal

172.16.0.1

src/security/ssrf/tests.rs:271 · url_literal

192.0.0.1

src/security/ssrf/tests.rs:297 · url_literal

192.0.2.1

src/security/ssrf/tests.rs:302 · url_literal

192.168.1.1

src/security/ssrf/tests.rs:270 · url_literal

192.168.1.5

src/gateway/router/origin_guard.rs:603 · url_literal

192.88.99.1

src/security/ssrf/tests.rs:292 · url_literal

198.18.0.1

src/security/ssrf/tests.rs:286 · url_literal

198.19.0.1

src/security/ssrf/tests.rs:287 · url_literal

198.51.100.1

src/security/ssrf/tests.rs:303 · url_literal

203.0.113.1

src/security/ssrf/tests.rs:304 · url_literal

203.0.113.5

src/gateway/router/origin_guard.rs:624 · url_literal

203.0.113.7

src/gateway/router/well_known.rs:428 · url_literal

2130706433

src/config/mod.rs:2123 · url_literal

224.0.0.1

src/security/ssrf/tests.rs:276 · url_literal

240.0.0.1

src/security/ssrf/tests.rs:281 · url_literal

8.8.8.8

src/security/ssrf/tests.rs:343 · url_literal

93.184.216.34

src/security/ssrf/tests.rs:344 · url_literal

a.com

src/transform/pipeline/tests.rs:562 · url_literal

abc123.ngrok.io

src/security/response_inspect.rs:347 · url_literal

accounts.attacker.example

src/personal_accounts/provider/provider_tests.rs:523 · url_literal

accounts.evil.invalid

src/config_reload/account_reload_guard_tests.rs:137 · url_literal

accounts.example.com

src/personal_accounts/provider/http.rs:243 · url_literal

accounts.google.com

src/config/descriptor_config_tests.rs:80 · url_literal

accounts.google.invalid

src/config_reload/account_reload_guard_tests.rs:34 · url_literal

agent.example.com

src/a2a/client.rs:281 · url_literal

api.anthropic.com

src/capability/definition/tests.rs:336 · url_literal

api.example.com

src/capability/backend.rs:1199 · url_literal

api.example.invalid

src/config/account_consumer_config_tests.rs:78 · url_literal

api.example.test

src/commands/protocol_import.rs:649 · url_literal

api.github.com

src/capability/definition/tests.rs:576 · url_literal

api.groq.com

src/capability/definition/tests.rs:339 · url_literal

api.invalid-test

src/config/tests.rs:1784 · url_literal

api.open-meteo.com

src/capability/definition/tests.rs:538 · url_literal

api.openai.com

src/capability/definition/tests.rs:332 · url_literal

api.podcastindex.org

src/capability/validator/tests/yaml_roundtrip.rs:609 · url_literal

Packages 3

docker:ghcr.io/mikkoparkkola/mcp-gateway:4.0.0

server.json:16 · launch:server.json

docker:ghcr.io/mikkoparkkola/mcp-gateway:latest-full

docs/DEPLOYMENT.md:130 · instructed

docker:mcp-gateway:latest

docs/DEPLOYMENT.md:61 · instructed

URLs 50

ftp://gw.internal

src/gateway/router/well_known.rs:374

ftp://localhost

src/transport/http/tests.rs:1731

ftp://localhost/mcp

src/transport/http/tests.rs:1815

http://0.0.0.0/api

src/security/ssrf/tests.rs:330

http://0.1.2.3/api

src/security/ssrf/tests.rs:331

http://0x7f.0.0.1

src/gateway/router/well_known.rs:466

http://10.0.0.1/api

src/security/ssrf/tests.rs:269

http://10.0.0.1/fixture

src/capability/execution_context.rs:386

http://10.0.0.1/internal

src/security/ssrf/tests.rs:426

http://10.0.0.5:1234

src/main_tests.rs:930

http://127.0.0.1

src/capability/executor_tests.rs:1630

http://127.0.0.1:1/

src/gateway/router/tests.rs:2755

http://127.0.0.1:1/mcp

src/gateway/server/warmstart.rs:1073

http://127.0.0.1:1/spec?api_key=SECRET-QUERY-VALUE

src/capability/executor_tests.rs:957

http://127.0.0.1:1/token?api_key=CANARY

src/capability/executor_tests.rs:2046

http://127.0.0.1:23373/v0/mcp

src/oauth/storage.rs:591

http://127.0.0.1:3000

src/oauth/metadata.rs:511

http://127.0.0.1:3000/endpoint

src/oauth/metadata.rs:510

http://127.0.0.1:3000/mcp

src/discovery/shadow/tests.rs:141

http://127.0.0.1:31337/mcp

src/discovery/shadow/tests.rs:200

http://127.0.0.1:39400

docs/DEPLOYMENT.md:731

HTTP://127.0.0.1:39400/

src/gateway/router/origin_guard.rs:803

http://127.0.0.1:39400/dashboard?bootstrap=

docs/DEPLOYMENT.md:997

http://127.0.0.1:39400/fixture

src/capability/execution_context.rs:372

http://127.0.0.1:39400/mcp

docs/DEPLOYMENT.md:964

http://127.0.0.1:39401

src/gateway/router/origin_guard.rs:804

http://127.0.0.1:39401/mcp

scripts/dev/check-control-drift.py:23

http://127.0.0.1:39477

src/commands/stats.rs:160

http://127.0.0.1:65535/mcp

src/gateway/server/mod.rs:4754

http://127.0.0.1:80

src/gateway/router/origin_guard.rs:795

http://127.0.0.1:8000

src/capability/definition/mod.rs:439

http://127.0.0.1:8000/sql

capabilities/automation/agent_search.yaml:43

http://127.0.0.1:8080

src/config/mod.rs:2118

http://127.0.0.1:8080/foo

src/security/ssrf/tests.rs:264

http://127.0.0.1:8080/mcp

src/transport/http/tests.rs:1796

http://127.0.0.1:9

src/capability/backend.rs:806

http://127.0.0.1:9/mcp

src/config_persistence.rs:490

http://127.0.0.1:9000/mcp

src/gateway/router/tests.rs:1863

http://127.0.0.1:9931

src/discovery/config_scanner.rs:764

http://127.0.0.1:9999

src/main_tests.rs:1015

http://127.0.0.1.evil.com

src/transport/http/tests.rs:1729

http://127.0.0.1.evil.com/mcp

src/transport/http/tests.rs:1813

http://127.0.0.1/api

src/security/ssrf/tests.rs:263

http://127.0.0.1/internal

src/security/ssrf/tests.rs:580

http://127.0.0.2

src/transport/http/tests.rs:1726

http://127.0.0.2:39400

src/gateway/router/origin_guard.rs:557

http://127.0.0.2:8080

src/config/mod.rs:2119

http://127.0.0.2:9000/mcp

src/transport/http/tests.rs:1797

http://127.1

src/gateway/router/well_known.rs:468

http://127.attacker.example.com/mcp

src/discovery/shadow/tests.rs:362

Linked repositories 11

GitHub repositories it links to or installs from, and whether their names can be taken over.

a2aproject/a2a-spec

url · not tracked

aximpact/axterminator

url · not tracked

cisco/mcp-scanner

url · not tracked

florianwil662/pyghidra-mcp

url · not tracked

url · not tracked

internetarchive/wayback

url · not tracked

url · not tracked

lukepeavey/quotable

url · not tracked

modelcontextprotocol/mcp-gateway

url · not tracked

open-pencil/open-pencil

url · not tracked

rust-lang/crates.io-index

url · not tracked