ni-c/mcp-hub

Package (npm 0.12.0)

npx -y @ni-c/[email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "mcp-hub": {
      "command": "npx",
      "args": [
        "-y",
        "@ni-c/[email protected]"
      ]
    }
  }
}

• CONFIG_PATH — Path to the mcp.json listing the servers to expose, in Claude Code's mcpServers format (default mcp.json in the working directory)
• IDLE_TIMEOUT_MINUTES — Minutes of inactivity before a server is put to sleep; 0 starts every server at launch and keeps it running (default 60)
• TOOL_CACHE_PATH — Tool snapshots of sleeping servers (default .mcp-hub/tool-cache.json beside the config)
• LOG_FILE — Mirror the hub's log lines into this file; stdout carries the protocol, so logging goes to stderr otherwise

This server takes extra arguments — see its repository.

Package (oci)

Package: oci ghcr.io/ni-c/mcp-hub:0.12.0

• EXTERNAL_URL required — Public base URL exactly as clients see it, e.g. https://mcp.example.net (no path)
• PASSWORD_HASH required secret — bcrypt hash of the OAuth login password (htpasswd -bnBC 10 "" 'pw' | tr -d ':\n')
• TWO_FACTOR — Set to totp to ask for a one-time code from an authenticator app at every sign-in. Default off.
• TOTP_SECRET secret — Base32 secret the authenticator app was set up with (mcp-hub-admin totp init). Read only when TWO_FACTOR is totp.
• TRUSTED_PROXIES — Comma-separated IPs/CIDRs of the reverse proxy allowed to set X-Forwarded-* headers
• CLIENT_REGISTRATION — Which mechanisms a client may use to obtain a client_id: cimd (Client ID Metadata Documents), dcr (RFC 7591 dynamic registration), or both
• CIMD_ALLOWED_ORIGINS — Comma-separated https origins whose client ID metadata documents are accepted, e.g. https://chatgpt.com; unset admits every https origin
• PORT — Listen port inside the container