durang

Gbrain HTTP Wrapper — AI skill for Claude Code

AI community

OAuth 2.1 + Bearer HTTP front-end for gbrain serve (stdio MCP).

How to install Gbrain HTTP Wrapper

This entry records only its repository, not the path inside it, so there is no exact command to give. Open durang/gbrain-http-wrapper and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Gbrain HTTP Wrapper does

OAuth 2.1 + Bearer HTTP front-end for gbrain serve (stdio MCP). PKCE + DCR + refresh tokens. Connected: ChatGPT, Claude.ai, Codex CLI, Claude Desktop, OpenClaw, Hermes. Tailscale Funnel compatible.

Alternatives in AI

CLI 代理 API — English 中文一个为 CLI 提供 OpenAI/Gemini/Claude/Codex 兼容 API 接口的代理服务器 19k ★
Rb Setup — First-time setup 1.3k ★
Claw Empire — Command Your AI Agent Empire from the CEO Desk — A local-first AI agent office simulator that orchestrates CLI 1.1k ★

README

gbrain-http-wrapper

OAuth 2.1 + Bearer HTTP front-end for `gbrain serve` (stdio MCP). Lets non-stdio clients — **ChatGPT**, **Claude.ai web**, **Codex CLI** (remote), **Claude Desktop**, Perplexity, custom apps — read and write to the same GBrain backend that local clients use via stdio.

**Status:** Production. 7 clients connected: Claude Code CLI ✅, claude.ai web ✅, ChatGPT App (OAuth) ✅, Codex CLI (EC2 + Mac) ✅, OpenClaw/Telegram ✅, Hermes ✅

When to use this wrapper vs `gbrain serve --http`

GBrain v0.22.7+ ships `gbrain serve --http` natively. Use **this wrapper** when you need:

OAuth 2.1 with PKCE + Dynamic Client Registration (ChatGPT requires this)
Master password consent gate for third-party clients
Process pool (N pre-warmed gbrain serve children for concurrency)
Per-token rate limiting and audit logging
Anti prompt-injection content wrapping
Custom Instructions endpoint (/.well-known/mcp/custom-instructions)

Use **native `gbrain serve --http`** when you just need simple Bearer token auth for trusted clients.

Architecture

HTTP client (OAuth 2.1 or static Bearer)
   │
   ▼ POST /mcp { jsonrpc: "2.0", method: "tools/call", ... }
this server (Bun + Hono :8787)
   ├─ /.well-known/* + /oauth/* — OAuth 2.1 (PKCE + DCR + refresh)
   ├─ validates Bearer against access_tokens table
   ├─ routes JSON-RPC to one of N pre-warm `gbrain serve` children
   ├─ pipes the response back as JSON
   └─ /mcp/sse for SSE streaming clients
   │
   ▼ stdin/stdout
gbrain serve (stdio MCP)
   │
   ▼ DATABASE_URL
Supabase Postgres (the brain)

Tailscale Funnel mounts the wrapper at `/mcp` and **strips that prefix** before forwarding to the upstream. The wrapper therefore dual-mounts every route under both `/` and `/mcp` so that `https://your-machine.ts.net/mcp/...` works whether the prefix survives or not.