Hub MCP Server

A dual-era Model Context Protocol (MCP) gateway: it serves many stdio MCP servers from one container, published over HTTPS, and speaks both MCP revisions on every endpoint - 2026-07-28 and 2025-11-25. The client picks, and cannot tell which one it is on from the answers. On the 2026 revision that includes elicitation - a child server's question reaches the person at the far end instead of dying at the gateway (how)…

People who work with docker, mcp gateway and oauth2 and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-17 · ★ 2 · #38 OF 153 MAINTAINED CLOUD INFRASTRUCTURE · VERIFIED 2026-09-18

MIT · TypeScript servers · how we verify → /methodology

01 · Install Hub

before you install - you'll need

Set PAPERLESS_API_TOKEN, EXTERNAL_URL, PASSWORD_HASH, TRUSTED_PROXIES before connecting. CONFIG_PATH is optional or environment-specific per the README.

Claude Code

claude mcp add ni-c-mcp-hub -- npx -y @ni-c/mcp-hub

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "ni-c-mcp-hub": {
      "command": "npx",
      "args": [
        "-y",
        "@ni-c/mcp-hub"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions · container (OCI image) - can be sandboxed away from your filesystem

repo age created 2026-08-10 - young repo, little track record yet

license MIT - declared in the repository

npm package @ni-c/mcp-hub - published under the repo owner's npm scope (@ni-c)

registry namespace io.github.ni-c is GitHub-verified and matches the repo owner

03 · What Hub can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Limitations (from the README)

- Change notifications (listChanged, resource updates) are carried on 2026-07-28 via subscriptions/listen, whose state is the open response rather than a session table. A 2025-11-25 client is offered neither, because that revision needs a channel the stateless transport does not keep - so the capability is withheld instead of announced and dropped. An on-demand server watches nothing while it sleeps; the subscription

Latest releases

v0.11.3 · 2026-09-12

Security · A remote upstream could redirect the hub anywhere. The MCP requests to · a remote server - tools/call, the event stream, subscriptions/listen - · went out with the platform's default of following every…

v0.11.2 · 2026-09-07

Security · An unset password was an open login. With neither PASSWORD nor · PASSWORD_HASH configured, checkPassword compared the form field with an · empty buffer - which matches an empty field - so anyone who could…

v0.11.1 · 2026-09-06

Security · The published image shipped a vulnerable libssh2, and no amount of · rescanning was going to change that. libssh2-1 1.10.0-3+b1 - pulled in as · a dependency of git, which the image installs so servers can…

04 · Who maintains Hub

mcp-hub is maintained by ni-c. We track 20 MCP servers from ni-c - 20 actively maintained, 5 combined GitHub stars, oldest repo from Aug 2026.

05 · Facts

category
cloud infrastructure - ranked #38 of 153 actively-maintained cloud infrastructure servers as of 2026-09-18.
release cadence
10+ releases in the last 90 days (latest 2026-09-12)
registry
io.github.ni-c/mcp-hub (active, first published 2026-08-14 · 16 versions)
packages
npm:@ni-c/mcp-hub · oci:ghcr.io/ni-c/mcp-hub:0.11.3

06 · Hub FAQ

What is Hub?

A dual-era Model Context Protocol (MCP) gateway: it serves many stdio MCP servers from one container, published over HTTPS, and speaks both MCP revisions on every endpoint - 2026-07-28 and 2025-11-25. The client picks, and cannot tell which one it is on from the answers. On the 2026 revision that includes elicitation - a child server's question reaches the person at the far end instead of dying at the gateway (how)…

Is Hub still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-17 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Hub?

Run `npx -y @ni-c/mcp-hub`. The README documents 5 environment variables (PAPERLESS_API_TOKEN, CONFIG_PATH, EXTERNAL_URL…) to set first. Set PAPERLESS_API_TOKEN, EXTERNAL_URL, PASSWORD_HASH, TRUSTED_PROXIES before connecting. CONFIG_PATH is optional or environment-specific per the README. You can also paste the ready-made client config above.

Does Hub run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Hub

More cloud infrastructure MCP servers · Contract Gate · No Crd · Deploy · Talos Linux MCP Server · Ocm MCP Server (ocm-mcp-server)

More TypeScript MCP servers · Engram · Pubcrawl · Redacta MCP · Swissgroceries MCP · Agentic Ads · see all