1. Conduid
  2. Agents
  3. Junctio
MCP server · Agents

Junctio

by · github.com/k2so-dev/junctio

Self-hosted MCP gateway: one container, one endpoint per client, upstream OAuth that never goes stale. Aggregate stdio, Docker and remote MCP servers behind a single URL for Claude Code, Codex and Cursor. No telemetry.

Unclaimed agentic-aiai-agentsai-toolsbunclaudeclaude-codecodexcursordeveloper-toolsdockerllmmcpmcp-gatewaymcp-proxymcp-servermodel-context-protocoloauth2self-hostedtypescriptvue
InstallView source
34Low

Scored 27 days ago · breakdown

About Junctio

Junctio is an MCP server published by k2so-dev in the Agents category: self-hosted MCP gateway: one container, one endpoint per client, upstream OAuth that never goes stale. Aggregate stdio, Docker and remote MCP servers behind a single URL for Claude Code, Codex and Cursor. No telemetry.

The repository has 2 stars and 0 forks, with the last commit 9 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/k2so-dev/junctio

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Junctio

Powered by Claude · Grounded in docs

I know everything about Junctio. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.2.5v0.2.5 · 8 Oct 2026Security `@modelcontextprotocol/sdk` moves to 1.32.1 and `@modelcontextprotocol/client`, `core` and `server` to 2.3.1**, closing [GHSA-6qxp-vccf-f47h](https://github.com/advisories/GHSA-6qxp-vccf-f47h) (the OAuth client could send…
v0.2.4v0.2.4 · 6 Oct 2026Security `proxy-addr` moves to 2.0.8**, closing [GHSA-jqcg-44mw-7w3h](https://github.com/advisories/GHSA-jqcg-44mw-7w3h) (IP spoofing via an IPv4-mapped IPv6 trust subnet). It ships transitively through `@modelcontextprotocol/sdk`'s…
v0.2.3v0.2.3 · 6 Oct 2026Fixed The gateway's audit of itself only reports packages the image actually ships.** `bun audit` reads the whole workspace lockfile, so the site and development tooling (`astro`, `drizzle-kit` and what they pull in) showed up as eight…
v0.2.2v0.2.2 · 5 Oct 2026Security The image is rebuilt on current Debian bookworm packages.** It picks up the fixed `perl-base`, `libpcre2-8-0` and `openssl` builds that Trivy flagged, including three critical Perl advisories; none of these are reached by the…
v0.1.0v0.1.0 · 16 Sep 2026First public release. Changed `JUNCTIO_DATA_DIR` defaults to `./data` instead of `/data`, so a source-tree run no longer tries to write to the filesystem root. The image still sets it to `/data`, which is where the named volume is mounted,…
Questions

About Junctio

How do I install Junctio?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Junctio safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Junctio still maintained?

Yes — the latest release is v0.2.5 (8 Oct 2026), and the last commit was 9 days ago. The repository has 2 stars.