k2so-dev

Junctio — DevOps skill for Claude Code

DevOps community

Self-hosted MCP gateway: one container, one endpoint per client, upstream OAuth that never goes stale.

How to install Junctio

This entry records only its repository, not the path inside it, so there is no exact command to give. Open k2so-dev/junctio and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Junctio does

Self-hosted MCP gateway: one container, one endpoint per client, upstream OAuth that never goes stale. Aggregate stdio, Docker and remote MCP servers behind a single URL for Claude Code, Codex and Cursor. No telemetry.

Alternatives in DevOps

Proxy — route Claude Code requests through multiple upstream providers (OpenCode Go, OpenCode Zen, and AWS Bedrock) wi 957 ★
Codeg — Aggregate and browse AI coding agent sessions (Claude Code, Codex, Gemini CLI, etc.) in one place 850 ★
Second Brain Cloudflare — One memory layer, every AI tool 734 ★

README

Junctio

Self-hosted MCP gateway for one developer or a small team. One container, one volume, one endpoint per client.

[![ci](https://github.com/k2so-dev/junctio/actions/workflows/ci.yml/badge.svg)](https://github.com/k2so-dev/junctio/actions/workflows/ci.yml) [![codeql](https://github.com/k2so-dev/junctio/actions/workflows/codeql.yml/badge.svg)](https://github.com/k2so-dev/junctio/actions/workflows/codeql.yml) [![trivy](https://github.com/k2so-dev/junctio/actions/workflows/scan.yml/badge.svg)](https://github.com/k2so-dev/junctio/actions/workflows/scan.yml) [![ghcr.io](https://img.shields.io/github/v/tag/k2so-dev/junctio?sort=semver&label=ghcr.io)](https://github.com/k2so-dev/junctio/pkgs/container/junctio) [![license](https://img.shields.io/github/license/k2so-dev/junctio)](LICENSE)

The promise: **auth does not go stale.** Not between your client and the gateway, and not between the gateway and its upstreams.

No telemetry. Nothing leaves your machine. There is no phone-home, no analytics, no update ping. The one outbound call the UI ever makes is to the public MCP registry, on the Explore page, and only while you are looking at it. Switch on the security audit and there is a second one, described in docs/security-audit.md, carrying package names and versions and nothing else.
One endpoint per client. Point Claude Code, Codex or Cursor at a single URL and manage the servers behind it from a web UI.
Upstream OAuth that survives. Tokens are refreshed proactively on a schedule, not after a request already failed.

Status

Early, but the whole path works: gateway, aggregation, API key auth, a built-in OAuth authorization server, upstream OAuth, REST API, web UI, registry browsing, import from a pasted client con