IBM/mcp-context-forge

Python 3.3k stars

An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified control plane with centralized governance, discovery, and observability for all your AI needs. Optimizes Agent & Tool calling, and supports plugins.

✓ Synced 1h ago Share on X →

README badge: [![ngmi](https://ngmi.review/badge/IBM/mcp-context-forge.svg)](https://ngmi.review/repo/IBM/mcp-context-forge)

1.3k Merged PRs

1 day Avg Merge Time

0m Fastest PR

2 months Slowest PR

      #223
      Global Speed Rank
    

PR Size Analysis

Lines changed (additions + deletions) vs review outcomes. Re-sync to populate data for older PRs.

PRs by size

Avg review time (hrs)

Clean approval rate (%)

Top Reviewers

@crivetimihai

596 reviews ✓ 555 approved ↺ 3 blocked

@madhav165

69 reviews ✓ 49 approved ↺ 2 blocked

@copilot-pull-request-reviewer

43 reviews

@kevalmahajan

33 reviews ✓ 31 approved ↺ 1 blocked

@jonpspri

30 reviews ✓ 1 approved

@rakdutta

23 reviews ✓ 20 approved ↺ 2 blocked

@terylt

19 reviews ✓ 6 approved

@araujof

19 reviews ✓ 10 approved ↺ 1 blocked

@github-advanced-security

13 reviews

#10

@brian-hussey

12 reviews ✓ 2 approved ↺ 4 blocked

Recent Merged PRs

#	Title	Author	Time	Reviews	Blocks
#3129	fix: complete medium hardening updates for auth, RBAC, OAuth/SSO, secrets, and admin UI defaults (m-batch-1)	@crivetimihai	7.2h	0	✓
#3124	Update docs	@crivetimihai	0m	0	✓
#3120	fix: llm proxy hardening and behavior consistency h-batch-7-final	@crivetimihai	56m	0	✓
#3115	fix: batch 6 hardening for oauth secrets, masking, auth timing, and outbound URL validation (h-batch-6)	@crivetimihai	1.3h	0	✓
#3114	fix: oauth and sso hardening and behavior consistency (h-batch-5)	@crivetimihai	1.5h	0	✓
#3111	fix: visibility and admin scope hardening and behavior consistency h-batch-4	@crivetimihai	1.4h	0	✓
#3107	fix: access control hardening and behavior consistency (h-batch-3)	@crivetimihai	37m	0	✓
#3106	fix: transport, session, and resource hardening consistency for RC2 - h-batch-2	@crivetimihai	1.1h	0	✓
#3104	fix: auth hardening consistency updates for RC2 (h-batch-1)	@crivetimihai	24m	0	✓
#3101	hardening: authz, transports, oidc, and ssrf (b-batch-1)	@crivetimihai	54m	0	✓
#2963	feat: implement Subresource Integrity (SRI) for CDN resources	@suciu-daniel	5 days	1	✓
#3097	fix(ci): reject placeholder secret values in validation step	@crivetimihai	31m	0	✓
#3096	fix(ci): CE secret sync silently fails to overwrite existing values	@crivetimihai	0m	0	✓
#3093	docs: fix rebrand errors where ContextForge replaced generic terms	@crivetimihai	0m	0	✓
#3092	feat(ci): auto-sync secrets from GitHub to Code Engine on deploy	@crivetimihai	1m	0	✓
#3091	docs: rebrand to ContextForge AI Gateway	@crivetimihai	1.3h	0	✓
#3090	feat: improve log hygiene and regression coverage for auth and gateway paths	@crivetimihai	26m	0	✓
#2767	Hardening: safer CORS config + localhost bind defaults	@TheodorNEngoy	12 days	2	✓
#3045	[FIX][UI]: Display readOnlyHint icon in tools table rows	@gcgoncalves	2 days	2	✓
#2985	feat(auth): handle EntraID group overage via Graph fallback with configurable limits	@crivetimihai	3 days	1	✓