Skip to main content
mcpSource-backed
ContextForge logo

IBM MCP Context Forge

Open-source MCP gateway, registry, and proxy from IBM that federates MCP servers, A2A agents, REST APIs, and gRPC services behind centralized discovery, governance, authentication, observability, and admin controls.

by IBM · submitted by oktofeesh1·added 2026-06-06·
Review first review before installing

Open the source and read safety notes before installing.

Citation facts

Source-backed facts for citing this resource, derived directly from the registry — also available as plain text for AI assistants.

Source URLs
https://github.com/IBM/mcp-context-forge/blob/main/README.md, https://github.com/IBM/mcp-context-forge
Brand
ContextForge
Brand domain
ibm.github.io
Brand asset source
brandfetch
Safety notes
ContextForge is a gateway and control plane; it can expose many downstream tools, agents, prompts, resources, REST APIs, and gRPC methods through one MCP-facing surface., Downstream permissions are inherited by the gateway, so review every registered server, virtualized API, plugin, and route before giving an agent access., Binding the gateway to a network interface, enabling the Admin UI/API, or using weak platform admin credentials can expose powerful administrative controls., Use strong JWT configuration, environment-specific issuers/audiences, token expiration, RBAC, TLS, and production security settings before shared or remote deployments., Treat plugins, API virtualization, pass-through headers, retries, and federation as trust-boundary changes, not just convenience features.
Privacy notes
Registered tool names, prompts, resources, API schemas, request headers, bearer tokens, upstream authorization headers, logs, traces, and tool results may pass through the gateway., OpenTelemetry, logging, admin views, and tracing backends can capture prompts, tool arguments, resource metadata, response data, errors, and user identifiers depending on configuration., User-scoped OAuth tokens, JWTs, platform admin credentials, Basic auth credentials, API keys, database URLs, and upstream service secrets should be stored in a secrets manager or protected environment, not committed to configuration files., Any data returned by downstream services can still be sent onward to the MCP client and model provider even when the gateway itself runs on trusted infrastructure.
Author
IBM
Submitted by
oktofeesh1
Claim status
unclaimed
Last verified
2026-06-06

Decision playbook

Review trust signals before you adopt

Signals are present but mixed. Use the checklist below to confirm the source and operational safety for your environment.

Compare context
Selected

0

Current score

63

Baseline

Delta

No baseline selected

No major trust-signal divergence detected in the current selection.

Source and provenance checks

Needs review

Confirm ownership and provenance before trusting install instructions.

  • Source link availableRequired

    Open the canonical repository and verify ownership.

    Done
  • Source provenance statusRequired

    Marked as source-backed.

    Done
  • Metadata reviewed

    No reviewed flag detected in metadata.

    Pending

Safety and privacy checks

Complete

Validate risk disclosures before installation or API wiring.

  • Safety notes presentRequired

    Review the listed safety guidance before running commands.

    Done
  • Privacy notes presentRequired

    Review data handling notes before connecting accounts or secrets.

    Done
  • Trust level risk gateRequired

    Trust level does not block evaluation.

    Done

Package and install checks

Needs review

Check package metadata and artifact integrity signals.

  • Install payload available

    Install or copy payload is available for review.

    Done
  • Package verification flag

    No package verification flag provided.

    Pending
  • Checksum metadata

    No checksum provided for downloaded artifact.

    Pending

Compare-driven decision checks

Needs review

Use compare context to validate trade-offs before adoption.

  • Compare tray has multiple entries

    Add at least one more entry to compare trust differences.

    Pending
  • Baseline comparison available

    No baseline peer selected yet.

    Pending
  • Diverging trust signals identified

    No major trust-signal divergence found.

    Pending

Setup at a glance

CLI install

Copy-ready — paste the snippet to get started.

35 minutes

Adoption plan

Balanced adoption plan

Current risk score 24/100. Use staged verification before broader rollout.

Risk 24

Pre-adoption checks

Validate source and review signals before any execution.

  • Confirm source provenanceRequired

    Source URL/provenance metadata is present.

    Done
  • Confirm metadata review state

    No review metadata found; increase manual validation.

    Pending
  • Verify install payload

    Install/config payload exists and can be inspected.

    Done

Security checks

Confirm safety, privacy, and package integrity signals.

  • Review safety notesRequired

    Safety notes are present.

    Done
  • Review privacy notesRequired

    Privacy notes are present.

    Done
  • Verify package integrity metadata

    No package verification/checksum metadata.

    Pending

Rollout

Adopt in controlled steps based on the selected plan.

  • Run in isolated sandbox firstRequired

    Use a constrained sandbox and observe behavior across multiple tasks.

    Pending
  • Roll out graduallyRequired

    Roll out to a small cohort before wider usage.

    Pending
  • Set monitoring and fallback

    Define rollback path and monitor errors after adoption.

    Pending

Evidence readiness

Evidence readiness matrix · balanced

Missing required evidence: Metadata review. Risk score 31.

Risk 31

Source provenance

Present

Source repository/provenance is listed.

Required in this preset

Metadata review

Missing

Review metadata is missing.

Required in this preset

Safety notes

Present

Safety notes are present.

Required in this preset

Privacy notes

Present

Privacy notes are present.

Optional in this preset

Package integrity

Missing

Package integrity metadata is missing.

Optional in this preset

Install payload

Present

Install payload is available.

Required in this preset

Required gaps: Metadata review

Decision timeline

Decision timeline · balanced

Blocking gaps: Check metadata review status. Risk 28.

Risk 28

triage

Confirm source provenanceRequired

Source/provenance metadata is available.

Done

triage

Check metadata review statusRequired

Review metadata is missing.

Pending

verify

Review safety notesRequired

Safety notes are available.

Done

verify

Review privacy notes

Privacy notes are available.

Done

verify

Validate package integrity metadata

Package integrity metadata is missing.

Pending

rollout

Verify install payload and commandsRequired

Install payload is available.

Done

Blockers: Check metadata review status

Prerequisite readiness

Prerequisite readiness

5 prerequisites to line up before setup. Have accounts and credentials ready first.

0/5 ready
Account & credentials3Install & runtime235 minutes

Safety & privacy surface

Safety & privacy surface

5 safety and 4 privacy notes across 4 risk areas. Review closely: credentials & tokens, permissions & scopes, third-party handling.

4 areas
  • SafetyGeneralContextForge is a gateway and control plane; it can expose many downstream tools, agents, prompts, resources, REST APIs, and gRPC methods through one MCP-facing surface.
  • SafetyPermissions & scopesDownstream permissions are inherited by the gateway, so review every registered server, virtualized API, plugin, and route before giving an agent access.
  • SafetyCredentials & tokensBinding the gateway to a network interface, enabling the Admin UI/API, or using weak platform admin credentials can expose powerful administrative controls.
  • SafetyCredentials & tokensUse strong JWT configuration, environment-specific issuers/audiences, token expiration, RBAC, TLS, and production security settings before shared or remote deployments.
  • SafetyGeneralTreat plugins, API virtualization, pass-through headers, retries, and federation as trust-boundary changes, not just convenience features.
  • PrivacyCredentials & tokensRegistered tool names, prompts, resources, API schemas, request headers, bearer tokens, upstream authorization headers, logs, traces, and tool results may pass through the gateway.
  • PrivacyPermissions & scopesOpenTelemetry, logging, admin views, and tracing backends can capture prompts, tool arguments, resource metadata, response data, errors, and user identifiers depending on configuration.
  • PrivacyCredentials & tokensUser-scoped OAuth tokens, JWTs, platform admin credentials, Basic auth credentials, API keys, database URLs, and upstream service secrets should be stored in a secrets manager or protected environment, not committed to configuration files.
  • PrivacyThird-party handlingAny data returned by downstream services can still be sent onward to the MCP client and model provider even when the gateway itself runs on trusted infrastructure.

Safety notes

  • ContextForge is a gateway and control plane; it can expose many downstream tools, agents, prompts, resources, REST APIs, and gRPC methods through one MCP-facing surface.
  • Downstream permissions are inherited by the gateway, so review every registered server, virtualized API, plugin, and route before giving an agent access.
  • Binding the gateway to a network interface, enabling the Admin UI/API, or using weak platform admin credentials can expose powerful administrative controls.
  • Use strong JWT configuration, environment-specific issuers/audiences, token expiration, RBAC, TLS, and production security settings before shared or remote deployments.
  • Treat plugins, API virtualization, pass-through headers, retries, and federation as trust-boundary changes, not just convenience features.

Privacy notes

  • Registered tool names, prompts, resources, API schemas, request headers, bearer tokens, upstream authorization headers, logs, traces, and tool results may pass through the gateway.
  • OpenTelemetry, logging, admin views, and tracing backends can capture prompts, tool arguments, resource metadata, response data, errors, and user identifiers depending on configuration.
  • User-scoped OAuth tokens, JWTs, platform admin credentials, Basic auth credentials, API keys, database URLs, and upstream service secrets should be stored in a secrets manager or protected environment, not committed to configuration files.
  • Any data returned by downstream services can still be sent onward to the MCP client and model provider even when the gateway itself runs on trusted infrastructure.

Prerequisites

  • Python 3.11 or newer, or a Docker/Podman runtime for the published container image.
  • uv, pip, or container deployment path selected from the upstream quick-start docs.
  • Gateway environment reviewed before launch, including admin credentials, JWT settings, UI/API enablement, database configuration, and exposed host/port.
  • At least one downstream MCP server, REST API, gRPC service, A2A agent, or virtual server to register behind the gateway.
  • Bearer token and virtual server URL available before connecting stdio-only clients through `mcpgateway.wrapper`.

Schema details

Install type
cli
Troubleshooting
No
Source repository stats
Scope
Source repo
Collection metadata
Estimated setup
35 minutes
Difficulty
advanced
Full copyable content
uvx --from mcp-contextforge-gateway mcpgateway

About this resource

Content

IBM MCP Context Forge is an open-source gateway, registry, and proxy for federating MCP servers, A2A agents, REST APIs, and gRPC services behind one managed control plane. It gives teams a place to register tools, prompts, resources, virtual servers, and adapted APIs, then expose selected gateway surfaces to MCP clients with centralized authentication, governance, observability, retries, and admin workflows.

The project can run from the mcp-contextforge-gateway Python package or the published container image. For clients that need stdio, the package includes mcpgateway.wrapper, which connects a local MCP client to a selected ContextForge virtual server while forwarding the configured gateway bearer token.

Source Review

These sources were reviewed on 2026-06-06. Prefer the live repository, package metadata, quick-start docs, wrapper docs, Claude Desktop integration guide, security guide, observability docs, and container deployment docs for current gateway startup, authentication, admin, wrapper, and deployment behavior.

Features

  • Run a compliant MCP gateway from PyPI with uvx --from mcp-contextforge-gateway mcpgateway.
  • Deploy the gateway from the published container image.
  • Federate native MCP servers, A2A agents, REST APIs, and gRPC services.
  • Register tools, prompts, resources, virtual servers, and adapted APIs in one gateway catalog.
  • Bridge ContextForge virtual servers to stdio-only MCP clients with mcpgateway.wrapper.
  • Manage gateway configuration through Admin UI/API flows when explicitly enabled.
  • Use JWT, platform admin accounts, RBAC, configurable auth headers, and production security settings.
  • Add observability with structured logs, metrics, OpenTelemetry traces, and supported tracing backends.
  • Use plugins, retries, rate limiting, database persistence, Redis-backed caching, and multi-cluster federation for larger deployments.

Installation

Start by running the gateway with reviewed environment settings:

uvx --from mcp-contextforge-gateway mcpgateway

Then register or import the downstream services you want the gateway to expose. For a stdio MCP client such as Claude Desktop, use the wrapper after selecting a specific ContextForge virtual server and creating an appropriate bearer token:

{
  "mcpServers": {
    "mcpgateway-wrapper": {
      "command": "python3",
      "args": ["-m", "mcpgateway.wrapper"],
      "env": {
        "MCP_SERVER_URL": "LOCAL_CONTEXTFORGE_SERVER_URL",
        "MCP_AUTH": "Bearer CONTEXTFORGE_JWT_TOKEN",
        "MCP_TOOL_CALL_TIMEOUT": "120",
        "MCP_WRAPPER_LOG_LEVEL": "OFF"
      }
    }
  }
}

Follow the upstream quick-start, wrapper, Claude Desktop, security, and deployment docs for the exact gateway URL, virtual server path, token generation, container options, database settings, and production hardening.

Use Cases

  • Give Claude one managed MCP-facing endpoint for several internal tools and APIs.
  • Put authentication, RBAC, audit logs, retries, and observability in front of multiple MCP servers.
  • Wrap existing REST or gRPC services as MCP tools without rewriting the upstream service.
  • Expose different virtual servers for different teams, agents, or environments.
  • Evaluate MCP gateway architecture before moving from local experiments to governed shared infrastructure.

Safety and Privacy

ContextForge should be treated as infrastructure, not as a small desktop helper. Anyone who can administer the gateway or register downstream services can shape which tools and APIs agents can call. Keep default/example credentials out of real deployments, review Admin UI/API exposure, require strong JWT settings, and apply RBAC before sharing a gateway with other users or agents.

Observability and gateway logs are useful for operations, but they can also capture sensitive tool arguments, resource identifiers, prompts, API responses, headers, and account data. Review logging, tracing, and telemetry destinations before routing production or customer data through the gateway.

Duplicate Check

No IBM/mcp-context-forge entry, IBM MCP Context Forge entry, ContextForge MCP gateway entry, or matching source URL was found in content/mcp.

Source citations

Add this badge to your README

Show that IBM MCP Context Forge is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.

Listed on HeyClaude
[![Listed on HeyClaude](https://heyclau.de/badge/mcp/ibm-mcp-context-forge.svg)](https://heyclau.de/entry/mcp/ibm-mcp-context-forge)

How it compares

IBM MCP Context Forge side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.

Field

Open-source MCP gateway, registry, and proxy from IBM that federates MCP servers, A2A agents, REST APIs, and gRPC services behind centralized discovery, governance, authentication, observability, and admin controls.

Open dossier

AGPL-licensed MCP-native platform with a private MCP registry, MCP gateway, Kubernetes MCP orchestrator, access control, credential resolution, observability, and deterministic tool guardrails for shared AI deployments.

Open dossier

Apache-2.0 agentic proxy that can expose stdio, HTTP, SSE, and Streamable HTTP MCP servers through a managed gateway with federation, OAuth/JWT authentication, RBAC/CEL policy, CORS, TLS, observability, and Kubernetes Gateway API support.

Open dossier

Lightweight Go MCP gateway that turns existing MCP servers and REST APIs into managed SSE or Streamable HTTP MCP endpoints through configuration.

Open dossier
Next steps
Trust
Review statusNot reviewedNot reviewedNot reviewedNot reviewed
Package trustPackage not verifiedPackage not verifiedPackage not verifiedPackage not verified
Source provenanceSource-backedSource-backedSource-backedSource-backed
Submitteroktofeesh1oktofeesh1oktofeesh1oktofeesh1
Install riskReview firstReview firstReview firstReview first
Notes Safety ✓ Privacy ✓ Safety ✓ Privacy ✓ Safety ✓ Privacy ✓ Safety ✓ Privacy ✓
BrandContextForge logoContextForgeArchestra logoArchestraagentgateway logoagentgatewayUnla logoUnla
Categorymcpmcpmcpmcp
SourceSource-backedSource-backedSource-backedSource-backed
AuthorIBMarchestra-aiagentgatewayAmoyLab
Added2026-06-062026-06-062026-06-062026-06-05
Platforms
Harness
Source repo
Safety notesContextForge is a gateway and control plane; it can expose many downstream tools, agents, prompts, resources, REST APIs, and gRPC methods through one MCP-facing surface. Downstream permissions are inherited by the gateway, so review every registered server, virtualized API, plugin, and route before giving an agent access. Binding the gateway to a network interface, enabling the Admin UI/API, or using weak platform admin credentials can expose powerful administrative controls. Use strong JWT configuration, environment-specific issuers/audiences, token expiration, RBAC, TLS, and production security settings before shared or remote deployments. Treat plugins, API virtualization, pass-through headers, retries, and federation as trust-boundary changes, not just convenience features.Archestra is a platform/control-plane entry, not a single-purpose local MCP helper; admins can expose many MCP servers, agents, tools, and credentials through one gateway. The upstream quickstart mounts the host Docker socket so the platform can run MCP servers; treat that as highly privileged host access and avoid using it on sensitive machines without isolation. Self-hosted MCP servers may run as Kubernetes workloads with injected environment variables, secrets, images, network policies, and restart controls. Tool assignments, gateway visibility, credential resolution, custom headers, and load-tools-on-demand settings should be reviewed per team and environment. Deterministic tool guardrails can reduce some unsafe tool chains, but they depend on correct policies and do not make untrusted MCP servers safe by default.Agentgateway can aggregate and expose many downstream MCP targets through one endpoint; every target's permissions become part of the gateway surface. Stdio targets are spawned by the gateway process, so commands such as package runners or containers inherit the gateway host's trust boundary. Demo configs use permissive CORS and local authorization servers; lock down origins, headers, issuers, audiences, JWKS, and resource metadata before production use. CEL/RBAC policies can inspect MCP tool names, arguments, results, prompts, resources, request bodies, JWT claims, API keys, and backend metadata; test policies before relying on them. Remote MCP proxying, OAuth provider adaptation, Kubernetes routing, TLS termination, and guardrails are infrastructure changes that should go through normal security review.Unla can expose existing MCP servers and REST APIs as new MCP endpoints, so the final tool surface depends on every imported config. Generated endpoints may proxy read/write API operations; review tool descriptions and permissions before connecting an autonomous agent. The upstream README notes that Unla is under rapid development and that documentation can lag behind implementation. Replace default admin credentials and secrets before exposing the management UI or gateway outside a trusted development network. Hot-loaded gateway configuration, multi-tenant routing, OAuth pre-authentication, and management UI access should be governed like production API infrastructure.
Privacy notesRegistered tool names, prompts, resources, API schemas, request headers, bearer tokens, upstream authorization headers, logs, traces, and tool results may pass through the gateway. OpenTelemetry, logging, admin views, and tracing backends can capture prompts, tool arguments, resource metadata, response data, errors, and user identifiers depending on configuration. User-scoped OAuth tokens, JWTs, platform admin credentials, Basic auth credentials, API keys, database URLs, and upstream service secrets should be stored in a secrets manager or protected environment, not committed to configuration files. Any data returned by downstream services can still be sent onward to the MCP client and model provider even when the gateway itself runs on trusted infrastructure.MCP server definitions, tool schemas, gateway tokens, upstream credentials, OAuth tokens, API keys, custom headers, logs, traces, and tool results may be stored or processed by the platform. Built-in observability, LLM proxy, chat, agents, and policy features can reveal prompts, tool arguments, tool outputs, token usage, user identities, team membership, and trace metadata. Registry entries and installations can use personal, team-scoped, or shared credentials; choose the narrowest scope that matches the use case. When external MCP clients call an Archestra gateway, downstream tool results can still be sent by the MCP client to the configured model provider.MCP requests, tool arguments, tool results, prompt names, resource names, session IDs, JWT/API-key claims, raw request/response bodies, logs, traces, and telemetry may pass through the gateway. CEL policy and observability features may buffer or inspect request and response bodies depending on configuration. OAuth/JWT metadata, bearer tokens, API keys, DCR secrets, Keycloak/Auth0/Okta settings, and upstream MCP credentials must be protected as secrets. Any data returned by downstream MCP tools can still be sent onward by the MCP client to the configured model provider.Unla may receive prompts, tool names, tool arguments, REST API parameters, upstream MCP responses, generated endpoint metadata, logs, admin credentials, JWT secrets, OAuth tokens, and configuration history. Imported REST API and MCP server configs can include private upstream URLs, headers, tokens, tenant identifiers, and service credentials. Persisted config backends and container logs may retain sensitive endpoint definitions and operational metadata. Do not commit real gateway configs, API credentials, admin passwords, JWT secrets, OAuth client secrets, or exported tenant data.
Prerequisites
  • Python 3.11 or newer, or a Docker/Podman runtime for the published container image.
  • uv, pip, or container deployment path selected from the upstream quick-start docs.
  • Gateway environment reviewed before launch, including admin credentials, JWT settings, UI/API enablement, database configuration, and exposed host/port.
  • At least one downstream MCP server, REST API, gRPC service, A2A agent, or virtual server to register behind the gateway.
  • Docker for local evaluation, or Kubernetes and Helm/Terraform-style deployment planning for production use.
  • Organization policy for which MCP servers, credentials, teams, environments, and external network destinations may be exposed.
  • LLM provider keys or local model configuration if using Archestra's built-in chat, agents, or LLM proxy features.
  • Admin review of the quickstart container command before mounting the Docker socket.
  • Agentgateway binary, container image, or source checkout from the upstream release/container/docs path.
  • At least one downstream MCP target, such as a stdio command, remote MCP server, SSE server, or Streamable HTTP server.
  • MCP client that can connect to the exposed Streamable HTTP or SSE route.
  • Auth, CORS, TLS, route, and policy configuration reviewed before shared or remote exposure.
  • Docker available for the all-in-one deployment, or Kubernetes and Helm if using the packaged cluster deployment.
  • Administrator username, administrator password, and JWT secret replaced before first start.
  • At least one existing MCP server or REST API configuration ready to import into the gateway.
  • Network, TLS, reverse proxy, and port exposure reviewed before sharing generated MCP endpoints.
Install
uvx --from mcp-contextforge-gateway mcpgateway
docker pull archestra/platform:latest
docker pull ghcr.io/agentgateway/agentgateway
docker run --name unla -p 8080:80 -p 5235:5235 -e ENV=production -e APISERVER_JWT_SECRET_KEY=YOUR_RANDOM_SECRET -e SUPER_ADMIN_USERNAME=YOUR_ADMIN_USER -e SUPER_ADMIN_PASSWORD=YOUR_ADMIN_PASSWORD ghcr.io/amoylab/unla/allinone:latest
Config
{
  "mcpServers": {
    "mcpgateway-wrapper": {
      "command": "python3",
      "args": ["-m", "mcpgateway.wrapper"],
      "env": {
        "MCP_SERVER_URL": "LOCAL_CONTEXTFORGE_SERVER_URL",
        "MCP_AUTH": "Bearer CONTEXTFORGE_JWT_TOKEN",
        "MCP_TOOL_CALL_TIMEOUT": "120",
        "MCP_WRAPPER_LOG_LEVEL": "OFF"
      }
    }
  }
}
{
  "mcpServers": {
    "archestra": {
      "url": "LOCAL_ARCHESTRA_MCP_GATEWAY_URL",
      "headers": {
        "Authorization": "Bearer ARCHESTRA_GATEWAY_TOKEN"
      }
    }
  }
}
{
  "mcpServers": {
    "agentgateway": {
      "url": "LOCAL_AGENTGATEWAY_MCP_URL",
      "headers": {
        "Authorization": "Bearer AGENTGATEWAY_MCP_TOKEN"
      }
    }
  }
}
{
  "mcpServers": {
    "unla-sse": {
      "url": "UNLA_SSE_ENDPOINT"
    }
  }
}
Citations
ClaimUnclaimedUnclaimedUnclaimedUnclaimed
Open 4 picks in the interactive comparison tool

Related guides

Signals

Loading live community signals…

More like this, weekly

A short, calm digest of reviewed Claude resources. Unsubscribe any time.