@boilingdata/mcp-server-and-gw
AMCP server package mcp-server-and-gw
Install
agr install @boilingdata/mcp-server-and-gw --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "mcp-server-and-gw", "version": "1.0.1", "description": "An MCP stdio to http sse gateway with example server and MCP client", "type": "module", "bin": { "mcp-server-and-gw": "./build/mcp-server-and-gw.js" }, "files": [ "build" ], "scripts": { "build": "rm -rf build && tsc", "prepare": "yarn run build", "watch": "tsc --watch", "inspector": "npx @modelcontextprotocol/inspector node build/mcp-server-and-gw.js", "release:patch": "npm version patch && git push && git push --tags", "release:minor": "npm version minor && git push && git push --tags", "release:major": "npm version major && git push && git push --tags" }, "dependencies": { "@types/node": "^22.13.14", "@modelcontextprotocol/sdk": "1.8.0", "eventsource": "^3.0.6" }, "devDependencies": { "@types/eventsource": "^1.1.15", "@types/express": "^5.0.1", "@types/json-bigint": "^1.0.4", "duckdb": "^1.2.1", "express": "^4.21.2", "json-bigint": "^1.0.0", "typescript": "^5.3.3" } }
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-83a2960fe7512026-08-03