Drop-in token-auth gateway in front of unauthenticated MCP servers
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 2 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
mcpauth_demo
-
mcpauth_verify
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 11
filesystem 2
- fs cognis-digital-mcpauth-50ab7c1/mcpauth/connect.py :76
text = sys.stdin.read() if a.input == "-" else open(a.input, encoding="utf-8").read() - fs cognis-digital-mcpauth-50ab7c1/mcpauth/core.py :33
from pathlib import Path
shell / exec 1
- shell (weak) cognis-digital-mcpauth-50ab7c1/tests/test_smoke.py :5
import subprocess
network 3
- net cognis-digital-mcpauth-50ab7c1/livesearch.py :28
import urllib.parse - net cognis-digital-mcpauth-50ab7c1/mcpauth/core.py :25
import socket - net (weak) cognis-digital-mcpauth-50ab7c1/tests/test_deep.py :9
import urllib.error
tool registrations 2
- mcpauth_verify cognis-digital-mcpauth-50ab7c1/mcpauth/mcp_server.py :53
- mcpauth_demo cognis-digital-mcpauth-50ab7c1/mcpauth/mcp_server.py :67
declared dependencies 3
- mcp@>=1.0
- cognis-connect@@ git+https://github.com/cognis-digital/cognis-connect.git
- pytest@>=8.0