About Federated MCP
Federated MCP is an MCP server published by ruvnet in the Developer Tools category: this implementation follows the official MCP specification, including proper message framing, transport layer implementation, and complete protocol lifecycle management. It provides a foundation for building federated MCP systems that can scale across multiple servers while maintaining security and standardization requirements.
The repository has 65 stars and 18 forks, with the last commit a month ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/ruvnet/federated-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
Ask AI about Federated MCP
Powered by Claude · Grounded in docs
Security checks
Static checks derived from the repository 11 hours ago. Heuristics on the source, not an audit.
- ✓README presentThe repository ships documentation.
- ✓License declaredUsable under a stated license.
- ✓Tests presentA test suite exists in the repository.
- ✓Dependencies pinnedA lockfile pins dependency versions.
- ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
- !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.
README
Federated MCP v2 preview
Observe public RuFlo federation activity from your terminal or an MCP agent. The adapter reads x.ruv.io through the official MCP SDK, labels every result as untrusted observation, and never turns messages into commands.
| Capability | Supported behavior |
|---|---|
| Federation identity and claims | Public snapshots with source and observation time |
| Channel discovery and reading | Public named channels only; private ciphertext remains private |
| CLI and MCP | Same bounded reader, local policy resource, validation and benchmark tools |
| Resource controls | Four concurrent reads, 30 second deadline, 1 MiB response, 64 KiB input frames |
| MetaHarness | Maintainer, security, release and benchmark profiles with host adapters |
| Autogenous | Explicit fitness gate; no automatic promotion or deployment |
Install and use
Requires Node 24. Clone this repository, then:
npm ci --ignore-scripts --prefix modern
node modern/src/cli.mjs status
node modern/src/cli.mjs identity
node modern/src/cli.mjs channels
node modern/src/cli.mjs read '{"channel":"pub:ruflo-release","limit":10}'
node modern/src/cli.mjs mcp
For an MCP host, configure command node and arguments ["/absolute/path/federated-mcp/modern/src/server.mjs"]. Install dependencies before starting the host. No gateway admin token is needed or accepted. MCP validation requires operator environment RUV_ALLOW_VALIDATION=1; the CLI test and bench commands explicitly opt in. Children have a fixed command, sanitized environment, 30 second deadline and 64 KiB output cap.
npm test
node modern/src/cli.mjs test
node modern/src/cli.mjs bench
npm audit --prefix modern
Security and evidence
Gateway authorship is not independent verification of peers or task execution. The reader cannot publish, mint invites, claim work, supply caller URLs or use credentials. Public content stays inert. The gateway identity can change; inspect its current response instead of treating a historical relay address as authoritative.
The legacy credential-bearing WebSocket proxy is retired and regression tested. Historical edge code is retained for reference but is outside the supported v2 entrypoints. See ADR 001, ADR 002, validation, and historical documentation.
MetaHarness package supplies local agent profiles and host integration. Field memory needs operator-owned storage and identity configuration; no production identity or live deployment is provisioned by installation.
Related projects
RuFlo, MetaHarness, Autogenous, RuVector, AgentBBS, QuDAG, and the federation provide related orchestration, evaluation, memory and coordination capabilities. Linking a project does not imply runtime integration.
README fetched from the repository 11 hours ago. The original is authoritative.