Blitz Strike
MCP ServerA penetration-testing methodology delivered as one MCP server: BLITZ maps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE live-verifies every finding before it is reported.
- mcp-server
- security
- pentest
- methodology
Exposes locally deployed MCP servers as strict OpenAPI 3.1.0 REST routes, built for the Open WebUI ecosystem.
Open MCP Gateway (OMG) aggregates MCP service nodes — native binary stdio, Node/Bun script pipelines, SSE or HTTP transports — behind HTTP routes generated strictly per the OpenAPI 3.1.0 spec: tool inputs mount under requestBody.content['application/json'].schema and generated operationIds match the original tool names exactly, with no tool_*_post naming pollution. A blue-green session pool guarded by an AsyncMutex hot-swaps services on config changes without interrupting in-flight requests; lifecycle self-healing and hot reloading cover process crashes and config edits. Built with Bun 1.4 and TypeScript, it compiles to a single native executable with no runtime dependencies, keeps state in an XDG-separated layout with environment-variable interpolation, parses X-Forwarded-* headers so OpenAPI servers.url always reflects the real external base URL, and manages external MCP packages with bun in the data directory.
Teams that already run MCP servers locally and are standardising on Open WebUI (or any OpenAPI-consuming client): point the gateway at your stdio/SSE/HTTP servers once and every tool becomes a REST call without touching the servers themselves.
# run from source (Bun 1.4+) git clone https://github.com/TiancongLx/open-mcp-gateway.git cd open-mcp-gateway && bun install && bun run dev # or compile a single native executable bun run build # output: build/mcp-gateway # config: $XDG_CONFIG_HOME/mcp-gateway/config.json5 # external MCP packages: cd $XDG_DATA_HOME/mcp-gateway && bun add <pkg>
Built for the Open WebUI ecosystem — any OpenAPI client can consume the routes, but the integration docs and end-to-end tests target Open WebUI. Requires Bun 1.4+ at runtime (or the compiled binary); the config is JSON5, so comments and trailing commas will trip plain-JSON tooling. A community project, not affiliated with the Open WebUI team. MIT.
Repository
TiancongLx/open-mcp-gatewayCharted
A penetration-testing methodology delivered as one MCP server: BLITZ maps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE live-verifies every finding before it is reported.
Red Hat's "ripgrep for AI context" — a C++23 zero-dependency CLI that also speaks MCP.
One shared session memory for 25+ coding agents — Claude Code, Codex, and Cursor finally remember the same project.