MCP-to-API Gateway

Transform any command, script, or API into a standardized Model Context Protocol server that LLMs can use seamlessly. Complete gateway solution with TLS/HTTPS encryption, rate limiting, embedded analytics and enterprise security.

Three Execution Modes

Local commands, containerized execution, and HTTP webhooks/APIs

Local Execution

Direct command execution with native performance

Container Isolation

Docker-based execution with complete isolation

Webhook/API Gateway

HTTP client for upstream API integration

Architecture Flow

Modular design with comprehensive monitoring

MCP Client
Claude Desktop
MCPFier
STDIO or HTTPS Gateway
Execution
3 Modes
Analytics
SQLite DB

Transport Layer

  • STDIO for desktop clients
  • HTTP/HTTPS with TLS support
  • HTTP/2 automatic upgrade

Authentication

  • API key-based auth
  • Granular permissions
  • Request validation

Execution Engines

  • Local command execution
  • Docker container isolation
  • HTTP webhook client

Security Features

  • TLS/HTTPS encryption
  • Rate limiting protection
  • Container isolation
  • Secure credential handling

Enterprise Security

Multi-layered security for production deployments

TLS/HTTPS Encryption

End-to-end encryption for all traffic

  • Encrypts API keys and authentication tokens in transit
  • Automatic HTTP/2 upgrade for improved performance
  • Bring your own certificates or use reverse proxy
  • Protects sensitive MCP protocol messages

Rate Limiting Protection

Token bucket algorithm prevents abuse

  • Per-client limits by API key or IP address
  • Configurable requests per minute and burst size
  • Protects against DoS and brute-force attacks
  • Fair resource allocation across clients

Container Isolation

Docker-based sandboxing for untrusted code

  • Complete filesystem isolation from host
  • Network isolation prevents unauthorized access
  • Resource limits (CPU, memory) enforceable
  • Automatic cleanup after execution
  • Run any language or tool without host dependencies

Secure Credential Handling

Environment variable expansion for secrets

  • No secrets hardcoded in configuration files
  • Support for ${VAR_NAME} syntax in webhook auth
  • Works with Bearer, API Key, and Basic auth
  • Integrates with secret management systems

Container Advantages for Production

Safety

  • Execute untrusted code safely
  • Prevent host system access
  • Isolate third-party dependencies
  • No privilege escalation risk

Flexibility

  • Use any programming language
  • Multiple runtime versions
  • Conflicting dependencies no problem
  • Reproducible execution environment

Control

  • CPU and memory limits
  • Timeout enforcement
  • Read-only filesystems
  • Custom security policies

Embedded Analytics

Comprehensive monitoring with web dashboard

MCPFier Analytics Dashboard

Total HTTP Requests
1,247
Success Rate
98.5%
Auth Success Rate
99.2%
Avg HTTP Request Time
12ms
Avg MCP Tool Time
185ms

Command Metrics

  • Execution statistics by mode
  • Success/failure rates
  • Performance timing
  • Most used commands

HTTP Server Metrics

  • Request/response tracking
  • Authentication metrics
  • Endpoint usage patterns
  • Error categorization

Upstream API Metrics

  • Webhook call success rates
  • API latency tracking
  • Error breakdown by type
  • Upstream service health

Simple Configuration

YAML-based setup with auto-discovery

config.yaml
commands:
  # Local execution
  - name: list-files
    script: ls
    args: ["-la"]
    description: "List directory contents"

  # Container execution
  - name: python-analysis
    script: python
    args: ["/app/analyze.py"]
    container: "python:3.9-slim"

  # Webhook/API execution
  - name: weather-api
    description: "Get current weather"
    webhook:
      url: "https://api.weather.com/v1/current"
      method: "GET"
      auth:
        type: "bearer"
        token: "${WEATHER_API_KEY}"

server:
  http:
    enabled: true
    host: "localhost"
    port: 8443
    tls:
      enabled: true
      cert_file: "/path/to/cert.pem"
      key_file: "/path/to/key.pem"
    auth:
      enabled: true
      api_keys:
        "mcpfier_key_123":
          permissions: ["*"]
    rate_limit:
      enabled: true
      requests_per_minute: 60
      burst_size: 10

analytics:
  enabled: true
  database_path: "~/.mcpfier/analytics.db"

Use Cases

Enterprise Integration

Transform internal APIs and workflows into MCP tools

Development Tools

Linting, testing, building, deployment automation

Infrastructure

Health checks, log analysis, backup operations

API Gateway

Bridge MCP clients to existing REST APIs and webhooks

Hybrid Workflows

Combine local scripts, containerized tools, and external APIs

AI Agents

Enable LLMs to access enterprise systems and external services