MCPHub

MCPHub is a self-hosted MCP gateway and control plane maintained by a single individual (GitHub samanhappy). It connects to upstream MCP servers configured in data/mcp_settings.json and, in the role this atom describes, exposes its own MCP endpoints at /mcp, /mcp/{group}, /mcp/{server} and two smart-routing variants, distributed as a Docker image, samanhappy/mcphub, alongside an npm package, @samanhappy/mcphub. The exposed endpoints require authentication by default and support a built-in OAuth 2.0 authorization server, bearer keys, and JWT-backed local accounts; the README documents the endpoint family generically as supporting SSE, Streamable HTTP, and stdio without separating which applies to the inbound consumer role versus the exposed server role. Authority is recorded as first-party under a self-owned- project reading: repository, docs, and product site are all controlled by the same maintainer, and MCPHub fronts no separate vendor's service.

The repository has published 21 security advisories as of 2026-09-15 (4 critical, 11 high, 5 medium, 1 low), up from 18 at an earlier count. Eight of those carry CVE ids and were reported in the eight-CVE batch story; a ninth, an OAuth 2.0 authentication bypass fixed in v1.0.32, was added in the September 3-15 security roundup. Three further advisories, all published 2026-09-02 and none carrying a CVE id, are not named in either story: GHSA-cvw6-m995-5vvv (medium, missing authorization letting non-admin users read and wipe system logs), GHSA-94jf-cmwm-q3p5 (high, an activity-log IDOR exposing all users' tool-call history in database mode), and GHSA-xvpg-v6pr-xc32 (medium, SSRF via unvalidated OAuth discovery, registration and metadata URLs in server configuration).