cloudgate-builder — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cloudgate-builder (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Build and manage Cloudgate workflow-APIs — controllers, actions, workflow graphs, and databases — from any MCP-compatible AI client, including Claude, OpenAI Codex, and others.
Cloudgate runs a hosted, remote MCP server at api.cloudgate.dev. It speaks the standard Model Context Protocol over streamable HTTP and authenticates each user with OAuth, so any client that supports remote MCP servers can connect. This repo also packages the server as a ready-to-install Claude plugin for convenience.
https://api.cloudgate.dev/mcp/workflowdev.cloudgate/workflowhttps://github.com/cloudgatedevs/mcphub.cloudgate.dev to sign in, then the tools become available.
claude plugin marketplace add cloudgatedevs/mcp
claude plugin install cloudgate-builder@cloudgate-app-templatesAdd the remote server to ~/.codex/config.toml (OAuth remote servers use Codex's RMCP client):
experimental_use_rmcp_client = true
[mcp_servers.cloudgate]
url = "https://api.cloudgate.dev/mcp/workflow"Then authenticate:
codex mcp login cloudgateAny client that supports remote (streamable HTTP) MCP servers can connect directly to https://api.cloudgate.dev/mcp/workflow and complete the OAuth sign-in.
For clients that only support stdio servers, bridge to the remote endpoint with mcp-remote:
{
"mcpServers": {
"cloudgate": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://api.cloudgate.dev/mcp/workflow"]
}
}
}The Cloudgate MCP server uses OAuth 2.1 (authorization code + PKCE). Each user signs in as themselves; every MCP call is scoped to that user's tenant and account. No tokens or secrets are stored in this repository.
The hosted server works on its own with any MCP client. This repo additionally ships the cloudgate-builder Claude plugin, which bundles the connection config plus a cloudgate-build skill — a playbook that guides the model through creating controllers, actions, workflow graphs, and databases correctly.
.claude-plugin/marketplace.json # Claude marketplace manifest (lists the plugins)
plugins/cloudgate-builder/ # the Claude plugin
.claude-plugin/plugin.json # plugin manifest
.mcp.json # MCP server connection (native remote HTTP)
README.md # plugin readme
skills/cloudgate-build/SKILL.md # the cloudgate-build skill
server.json # MCP Registry metadata (dev.cloudgate/workflow)© Cloudgate Dev LLC.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.