MikkoParkkola/mcp-gateway
MCP Developer ToolsUniversal MCP gateway with single-port multiplexing and Meta-MCP. 4 meta-tools replace 100+ registrations, saving 95% context window. Hot-reloadable capabilities, OpenAPI auto-import, 42 starter capabilities (25 zero-config).
Features
- Routes MCP traffic to backend servers and REST APIs on demand
- Reduces context‑window overhead by exposing a compact Meta‑MCP surface (~16 tools)
- Provides hot‑reload, circuit‑breaker isolation, and YAML/OpenAPI based API registration
Recent releases
View all 18 releases →- Dependency upgrades: reqwest 0.13, rand 0.10, rcgen 0.14, jsonwebtoken 10.3, quick-xml 0.39, x509-parser 0.18, axum-server 0.8, md5 0.8, dialoguer 0.12, clap_complete 4.6
- All new features are compile‑time gated; disable any with `--no-default-features`
- Cost Governance: per-tool, per-key, and global daily budgets with alert thresholds and live spend dashboard
- Security Firewall: bidirectional request/response scanning, credential redaction, injection detection, NDJSON audit logging
- Semantic Search: TF-IDF ranked tool search across names and descriptions with relevance feedback
Full changelog
What's New in v2.6.0
Six new features, 13 dependency upgrades, and 2,461+ tests passing.
New Features
- Cost Governance (RFC-0075) — Per-tool, per-key, and global daily budgets with configurable alert thresholds (log, notify, block). Live spend dashboard at
/ui/api/costs. - Security Firewall (RFC-0071) — Bidirectional request/response scanning with credential redaction (AWS keys, GitHub tokens, JWTs), prompt injection detection, shell/SQL/path traversal detection, and NDJSON audit logging.
- Config Export (RFC-0070) — Export running gateway configuration as sanitized YAML or JSON with secrets masked. Supports Claude Code, Cursor, Windsurf, and Zed client formats.
- Auto-Discovery (RFC-0074) — Automatically discover MCP servers from npm, pip, and Docker sources with quality scoring and deduplication.
- Semantic Search (RFC-0072) — TF-IDF ranked tool search across all tool names and descriptions with relevance feedback learning.
- Tool Profiles (RFC-0073) — Usage analytics per tool: latency histograms, error categorization, usage trends, and success rates with persistent storage.
Dependency Upgrades
reqwest 0.13, rand 0.10, rcgen 0.14, jsonwebtoken 10.3, quick-xml 0.39, x509-parser 0.18, axum-server 0.8, md5 0.8, dialoguer 0.12, clap_complete 4.6
Quality
- 2,461+ tests (unit + integration + doc tests), 0 failures
- 19 cross-feature integration tests
- Performance benchmarks: firewall <1µs, cost enforcer <100ns, semantic search <50µs
- All features compile-time gated — disable any with
--no-default-features
Install
# Homebrew
brew upgrade mcp-gateway
# Cargo
cargo install mcp-gateway
# Binary (macOS ARM64)
curl -L https://github.com/MikkoParkkola/mcp-gateway/releases/download/v2.6.0/mcp-gateway-darwin-arm64 -o mcp-gateway
chmod +x mcp-gateway
Full Changelog: https://github.com/MikkoParkkola/mcp-gateway/compare/v2.5.0...v2.6.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.