Mithrandir — free MCP gateway test

io.github.Hyhyr2Published by GitHub account Hyhyr2v0.20.0Updated Oct 24, 2026

Observe MCP tools, verify repeated reads, then try bounded exact reuse for free.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A remote MCP gateway test server that lets an assistant run a synthetic reuse demo, start a bounded free gateway trial, and read a security trust model.

What you can do
Run an isolated synthetic Reuse Autopilot demonstration comparing unchanged, one-partition-changed and missing-source behavior, with no production account, upload, payment or private data involved. Start a bounded free gateway test by connecting a public HTTPS MCP server, approving safe reads and verifying repetition before free Optimize activation. Retrieve a machine-readable description of the v17 Cognitive Membrane trust model covering origin-bound authority, task-scoped exact-call capabilities, replay protection, egress control and two-phase effectful actions.
When to use it
Useful when you want to evaluate the gateway's reuse behavior and security model before onboarding, using a synthetic demo rather than real data. Suited to teams deciding whether to connect their own public HTTPS MCP server to a free trial.
Requirements
A remote streamable HTTP endpoint; no authentication, environment variables or headers are declared. The gateway trial requires a public HTTPS MCP server of your own to connect.
Before you install
The security profile is a contract description, not proof that a deployment is vulnerability-free. The gateway trial connects your own public MCP server and involves approving reads, so review what is exposed before starting it.

Installation

In SourceWeft

  1. Open Mithrandir — free MCP gateway test in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.Hyhyr2%2Fmithrandir/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "mithrandir-free-gateway-test": {
      "type": "http",
      "url": "https://mithrandir-production.up.railway.app/mcp"
    }
  }
}

Tools

3

mithrandir_demo

Run a free isolated synthetic Reuse Autopilot demonstration. No production account, upload, payment or private data is used. Compare unchanged, one-partition-changed and missing-source behavior before onboarding.

Parametersscenario

mithrandir_gateway_trial_start

Start a bounded free gateway test. Connect your public HTTPS MCP server, then approve safe reads and verify repetition before free Optimize activation.

Parametersnamerequiredaccept_termsrequiredupstream_urlrequiredpolicy_versionrequiredidempotency_keyrequiredsafe_read_toolscache_ttl_secondsmin_shadow_matchestool_costs_microusd

mithrandir_security_profile

Free machine-readable description of the v17 Cognitive Membrane trust model: origin-bound authority, task-scoped exact-call capabilities, replay protection, egress control and two-phase effectful actions. This is a security contract description, not proof that a deployment is vulnerability-free.

Takes no parameters.

Version history

7
  1. v0.20.0LatestSep 28, 2026
  2. v0.19.9Sep 27, 2026
  3. v0.18.1Sep 25, 2026
  4. v0.18.0Sep 25, 2026
  5. v0.17.9Sep 25, 2026
  6. v0.17.8Sep 25, 2026
  7. v0.17.4Sep 24, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.