MetaMCP, the open source model context protocol aggregator: group many MCP servers behind one namespaced, authenticated endpoint, with middleware and a management UI, secured from first boot by cloudimg.
MetaMCP is an open source aggregator, orchestrator, middleware and gateway for the Model Context Protocol, the standard that lets AI assistants and agents call external tools. It groups many separate MCP servers into namespaces and exposes each namespace as one endpoint, reachable over the streamable HTTP and SSE transports and as an OpenAPI REST surface, so a client connects once and reaches every underlying tool. A management web interface registers the downstream servers, composes them into namespaces, applies per namespace tool middleware such as filtering, and issues API keys that gate access to the aggregated endpoints, giving teams a single controlled front door to their MCP tool estate instead of wiring every assistant to every server by hand.
It suits platform and AI engineering teams who are running more than one MCP server and want central registration, namespacing, middleware and authenticated access over the tools their agents can call, hosted inside their own cloud account.
cloudimg ships MetaMCP secure by default with no surviving default login. On the first boot of every instance a unique administrator password, the session authentication secret, the database password and an API key are all generated fresh and the administrator credential is written to a root only file, so no two deployments share a secret and the upstream defaults never govern a running instance. Public sign up is disabled once the single administrator is seeded, the database is bound to a private network rather than exposed, the application is fronted by a TLS reverse proxy, and unauthenticated requests to the aggregated endpoints are refused. Because an aggregator is only useful once something is aggregated, the appliance registers one real reference MCP server and a namespace and endpoint at first boot, and the build verifies a real tool call travelling through the aggregated endpoint end to end, plus a full create and read back of a server, namespace and endpoint through the management API. The base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step guide and backed by 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.