Make your MCP servers secure and production ready
Minibridge serves as a backend-to-frontend bridge, streamlining and securing communication between Agents and MCP servers. It safely exposes MCP servers to the internet and can optionally integrate with generic policing services โ known as Policers โ for agent authentication, content analysis, and transformation. Policers can be implemented remotely via HTTP or locally using OPA Rego policies.
Minibridge can help ensure the integrity of MCP servers through SBOM (Software Bill of Materials) generation and real-time validation.
Additionally, Minibridge supports OTEL and can report/rettach spans from classical OTEL headers, as well as directly from the MCP call, as inserted by certain tool like Open Inference.
[!TIP] Conveniently, Minibridge can be started in an "all-in-one" (AIO) mode to act as a single process.
Minibridge covers the following:
Minibridge can be installed from various places:
On macOS, you can use Homebrew
brew tap acuvity/tap
brew install minibridge
On Arch based Linux distributions, you can run:
yay -S minibridge
Alternatively, to get the latest version from the main branch:
yay -S minibridge-git
If you have the Go toolchain install:
go install go.acuvity.ai/minibridge@latest
Alternatively, to get the latest version from the main branch:
go install go.acuvity.ai/minibridge@main
You can easily grab a binary version for your platform from the release page.
๐ Feature | ๐น MCP | ๐ธ Minibridge | ๐ฆ ARC (Acuvity Containers) |
---|---|---|---|
๐ Remote Access | โ ๏ธ | โ | โ |
๐ TLS Support | โ | โ | โ |
๐ Tool integrity check | โ | โ | โ |
๐ Visualization and Tracing | โ | โ | โ |
๐ก๏ธ Isolation | โ | โ ๏ธ | โ |
๐ Security Policy Management | โ | ๐ค | โ ๏ธ |
๐ต๏ธ Secrets Redaction | โ | ๐ค | โ ๏ธ |
๐ Authorization Controls | โ | ๐ค | ๐ค |
๐งโ๐ป PII Detection and Redaction | โ | ๐ค | ๐ค |
๐ Version Pinning | โ | โ | โ |
โ Included | โ ๏ธ Partial/Basic Support | ๐ค Custom User Implementation | โ Not Supported
Suppose your client configuration originally specifies an MCP server like this:
{
"mcpServers": {
"fetch": {
"command": "uvx",
"args": ["mcp-server-fetch"]
}
}
}
To route requests through Minibridge (enabling SBOM checks, policy enforcement, etc.), update the entry:
{
"mcpServers": {
"fetch": {
"command": "minibridge",
"args": ["aio", "--", "uvx", "mcp-server-fetch"]
}
}
}
minibridge aio
: Invokes Minibridge in โall-in-oneโ mode, wrapping the downstream tool.uvx mcp-server-fetch
: The original MCP server command, now executed inside Minibridge.[!TIP] The location of the configuration files depends on your Client. For example, if you use Claude Desktop, configuration files are located:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json
- Windows:
%APPDATA%\Claude\claude_desktop_config.json
See the official MCP QuickStart for Claude Desktop Users documentation.
[!IMPORTANT] Your client must be able to resolve the path of the binary. If you see an error like
MCP fetch: spawn minibridge ENOENT
, set thecommand
parameter above to the full path of minibridge (which minibridge
will give you the full path).
Check out the complete documentation from the wiki pages.
We are excited to welcome contributions from everyone! ๐ Whether you're fixing bugs, enhancing features, improving documentation, or proposing entirely new ideas, your involvement helps strengthen the project and benefits the entire community.
You do not need to sign a Contributor License Agreement (CLA) โ just open a pull request and let's collaborate!
{ "mcpServers": { "minibridge": { "command": "minibridge", "args": [ "aio", "--", "uvx", "mcp-server-fetch" ] } } }
Related projects feature coming soon
Will recommend related projects based on sub-categories