Skip to content

v0.1.0 — first public release

Choose a tag to compare

View all tags
@wellknownmcp wellknownmcp released this 04 Jul 16:32
· 41 commits to main since this release
v0.1.0
b396376

First public release.

Cortex Gateway is a self-hosted, federated MCP gateway: one spec-compliant, OAuth 2.1-protected MCP server (Streamable HTTP, MCP 2025-06-18) in front of N plain-HTTP backends. Permissions are never mirrored — the gateway propagates the real user identity, so each app's native permission model applies per user.

Highlights

  • Federation: backends implement a single POST endpoint (~120-line contract, no MCP library); the gateway discovers tools every 60s, merges them into one catalog with <backend>_ prefixes, and routes tools/call to the owning backend (SSE tools/list_changed push included).
  • OAuth 2.1 resource server: RFC 9728 discovery (401 + WWW-Authenticate), scope-filtered tools/list — scopes double as plan entitlements, zero paywall code.
  • Identity propagation: your JWT to first-party backends (RFC 8707 audience), the user's own linked token to proxied third-party MCP servers.
  • MCP→backend proxy adapter (beta): federate native MCP servers, with a per-user AES-256-GCM token vault and OAuth/DCR/PKCE downstream discovery. Unit-tested against the spec, not yet against a commercial provider — beta means beta.
  • Self-describing backends + agent feedback loop: get_help convention pushed in server instructions; report_missing_capability / list_cortex_tickets builtins (deduplicated, triaged, optionally backend-owned).
  • Agent-ready surfaces: server icons + websiteUrl (2025-11-25 spec fields), /llms.txt on the gateway itself, AGENTS.md with verifiable claims.
  • Demo authorization server included: OAuth 2.1 with DCR, PKCE, strict refresh rotation, magic-link signup, consent, scope tiering (RFC 8414/7591/7009/7662).

Try it

Live demo (plug into claude.ai → Settings → Connectors → Add custom connector):

https://mcp.cortex-gateway.dev/mcp

Self-host:

docker run ghcr.io/wellknownmcp/cortex-gateway:v0.1.0

Docs: backend contract · deployment runbook · cortex-gateway.dev

Validated end-to-end on 2026-07-04: claude.ai Custom Connector → magic link → consent → scope-filtered tools/list → tools/call.

Assets 2
Loading