OAuth token exchange + Vault + MCP Apps + Dataplane
mcp-context-forge
Reverse Proxies & Load BalancersAn open‑source registry and proxy that federates MCP, A2A, REST/gRPC APIs into a single endpoint with centralized governance, discovery, and observability.
Features
- Federates MCP servers, A2A agents, and REST/gRPC APIs into one endpoint
- Provides centralized governance, discovery, and observability (OpenTelemetry)
- Supports protocol translation (gRPC → MCP, WebSocket/SSE/stdio) via plugins
- Scalable deployment through PyPI packages or Docker containers
Security Response History
1 CVE| CVE | Severity | Disclosed | Patched (this tool) | vs Ecosystem Median |
|---|---|---|---|---|
| CVE-2023-4863 KEV |
high
CVSS 8.8
|
2023-09-13 | 2026-01-24 | 2y 4mo / median 2y 4mo |
Recent releases
View all 11 releases →
Config change
v1.0.6
Breaking risk
Auth
Breaking upgrade
Config change
v1.0.5
Breaking risk
Auth
API versioning, auth hardening, A2A, UI stability, build
Review required
v1.0.3
Breaking risk
Auth
RBAC
Crypto / TLS
Security, Admin UI, FIPS, Performance, Build
Config change
v1.0.2
Breaking risk
Auth
RCE / SSRF
Breaking upgrade
Admin UI rewrite + DB migrations + security
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
pip
docker