Mcp Bridge — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Bridge (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="./docs/assets/mcp-bridge-mark.svg" alt="MCP Bridge" width="120" height="120" /> </p>
<h1 align="center">MCP Bridge</h1>
<p align="center"><strong>Turn internal APIs and cURL workflows into local MCP tools for AI agents.</strong></p>
<p align="center"> MCP Bridge helps teams convert existing HTTP operations into structured, local-first MCP tools that Claude Desktop, Cursor, Zed, and other MCP clients can safely call. </p>
<p align="center"> <a href="./README.md">English</a> · <a href="./README.zh-CN.md">简体中文</a> </p>
<p align="center"> <a href="https://github.com/ainativeera/mcp-bridge/actions/workflows/ci.yml"><img alt="CI" src="https://img.shields.io/github/actions/workflow/status/ainativeera/mcp-bridge/ci.yml?branch=main&label=CI&style=flat-square"></a> <a href="https://github.com/ainativeera/mcp-bridge/blob/main/LICENSE"><img alt="License" src="https://img.shields.io/github/license/ainativeera/mcp-bridge?style=flat-square"></a> <a href="https://github.com/ainativeera/mcp-bridge/stargazers"><img alt="Stars" src="https://img.shields.io/github/stars/ainativeera/mcp-bridge?style=flat-square"></a> <a href="https://github.com/ainativeera/mcp-bridge/issues"><img alt="Issues" src="https://img.shields.io/github/issues/ainativeera/mcp-bridge?style=flat-square"></a> </p>
<p align="center"> <a href="https://github.com/ainativeera/mcp-bridge">GitHub</a> · <a href="#getting-started">Getting Started</a> · <a href="#suggested-mcp-client-config">MCP Config</a> · <a href="./CONTRIBUTING.md">Contributing</a> · <a href="./SECURITY.md">Security</a> </p>
MCP Bridge overview
MCP Bridge is designed for real-world office automation scenarios where teams already have working cURL commands and want to convert them into safer, reusable, and agent-friendly tools without rebuilding integrations from scratch.
cURL import workflow
MCP config panel
React UI
-> Electron desktop shell
-> Local Express server
-> SQLite storage
-> MCP SSE endpoint
-> External APIs imported from cURL definitionsKey entry points:
src/App.tsx: main application UIserver.ts: local Express server and MCP SSE implementationelectron-main.ts: Electron main process and desktop bridgesrc/db.ts: SQLite persistence layernpm installnpm run devOpen:
http://localhost:3000npm run electron:devnpm run buildnpm run dist:mac
npm run dist:winnpm run checkCopy .env.example to .env and adjust as needed.
Important values:
PORT: local HTTP and SSE portNODE_ENV: development or productionDB_PATH: SQLite database locationAPI_KEY: optional API key for protecting local MCP accessRATE_LIMIT_WINDOW_MS: API rate limiting windowRATE_LIMIT_MAX_REQUESTS: max requests allowed in the windowCORS_ORIGINS: comma-separated originsLOG_LEVEL: logger verbosityWhen the server is running locally, the SSE endpoint is:
http://localhost:3000/sseIn the packaged desktop app, the UI surfaces the detected local network address to make client setup easier across devices on the same LAN.
{
"mcpServers": {
"mcp-bridge": {
"url": "http://localhost:3000/sse"
}
}
}If you enable an API key:
{
"mcpServers": {
"mcp-bridge": {
"url": "http://localhost:3000/sse",
"headers": {
"X-API-Key": "your-secret-api-key"
}
}
}
}Contributions are welcome. Start here:
This project is licensed under the MIT License. See LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.