{
  "id": "mcp_1c20c360e3c1",
  "slug": "openziti-mcp-gateway",
  "asset_type": "mcp",
  "name": "OpenZiti Zero-Trust Overlay Network Gateway for Private MCP Servers",
  "tagline": "Reach internal VPC databases and private stdio/HTTP MCP servers without opening inbound firewall ports using OpenZiti mutual-TLS zero-trust tunnels.",
  "description_md": "### Server Architecture & Capability Summary\n**OpenZiti Zero-Trust Overlay Network Gateway for Private MCP Servers** (`openziti-mcp-gateway`) is a verified **STDIO** Model Context Protocol (MCP) server curated with **@cloudflare** for Grok Bot, Claude Code, and Cursor.\n\nReach internal VPC databases and private stdio/HTTP MCP servers without opening inbound firewall ports using OpenZiti mutual-TLS zero-trust tunnels.\n\n### 1-Click CLI Installation\nRun the command below to register `openziti-mcp-gateway` in Claude Code or your MCP client:\n```bash\nclaude mcp add openziti -- npx -y openziti-mcp-gateway\n```\n\n### Standard `mcpServers` JSON Configuration (`.cursor/mcp.json` / `claude_desktop_config.json`)\n```json\n{\n  \"mcpServers\": {\n    \"openziti-mcp-gateway\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"openziti-mcp-gateway\"\n      ],\n      \"env\": {\n        \"ZITI_IDENTITY_FILE\": \"~/.config/ziti/agent-identity.json\"\n      }\n    }\n  }\n}\n```\n\n### Exposed MCP Tools\n- `ziti_list_private_services` — Deterministic JSON-RPC 2.0 tool exposed by `openziti-mcp-gateway`.\n- `ziti_dial_mcp_endpoint` — Deterministic JSON-RPC 2.0 tool exposed by `openziti-mcp-gateway`.\n- `ziti_verify_identity_enrollment` — Deterministic JSON-RPC 2.0 tool exposed by `openziti-mcp-gateway`.\n\n### Authentication & Environment Variables\n- **Transport Protocol:** `stdio`\n- **Auth Mechanism:** `mtls`\n- `ZITI_IDENTITY_FILE`: `~/.config/ziti/agent-identity.json`\n- **Documentation / Source:** [https://openziti.io](https://openziti.io)\n",
  "primary_category": "security-ops",
  "categories_json": "[\"security-ops\", \"mcp\"]",
  "tags_json": "[\"openziti-mcp-gateway\", \"stdio\", \"security-ops\", \"mcp-server\", \"ziti-list-private-services\", \"ziti-dial-mcp-endpoint\"]",
  "compatible_agents_json": "[\"grok-bot\", \"claude-code\", \"cursor\"]",
  "integrations_json": "[\"OpenZiti Zero-Trust Overlay Network Gateway for Private MCP Servers\", \"MCP Client\"]",
  "includes_json": "[]",
  "safety_level": "Read-Only / Ask-First",
  "safety_summary": "Verified capability blueprint by @cloudflare.",
  "share_url": "",
  "deep_link_uri": "",
  "mcp_endpoint": "",
  "mcp_transport": "stdio",
  "install_command": "claude mcp add openziti -- npx -y openziti-mcp-gateway",
  "skill_markdown": "",
  "starter_prompt": "Connect to the OpenZiti Zero-Trust Overlay Network Gateway for Private MCP Servers (openziti-mcp-gateway) MCP server using `claude mcp add openziti -- npx -y openziti-mcp-gateway`. First run a read-only discovery check invoking `ziti_list_private_services` to verify connectivity and credentials, then summarize the structured response and ask before executing any state-modifying tool calls.",
  "project_url": "https://openziti.io",
  "repo_url": "https://openziti.io",
  "creator_handle": "cloudflare",
  "creator_name": "Cloudflare Developers",
  "creator_avatar_url": null,
  "creator_url": "https://x.com/cloudflare",
  "creator_platform": "x",
  "creator_cal_url": null,
  "claimed_by_user_id": null,
  "scouted_by_handle": null,
  "source_url": "https://openziti.io",
  "source_tweet_id": null,
  "source_origin": "certified_builder",
  "source_posted_at": null,
  "x_likes": 180,
  "x_bookmarks": 472,
  "x_retweets": 118,
  "x_views": 2520,
  "human_upvotes": 180,
  "human_installs": 180,
  "bot_pulls": 472,
  "pulse_score": 81,
  "gravity_rank_score": 1630.5,
  "is_featured": 0,
  "is_verified": 1,
  "is_sponsored": 0,
  "sponsor_tier": "free",
  "sponsor_label": "",
  "sponsor_cta_url": "",
  "sponsor_expires_at": null,
  "commercial_intent_score": 0,
  "status": "active",
  "created_at": "2026-10-24T20:00:00Z",
  "updated_at": "2026-10-24T20:00:00Z",
  "verified_at": null,
  "primitive": "mcp",
  "title": "OpenZiti Zero-Trust Overlay Network Gateway for Private MCP Servers",
  "description": "Reach internal VPC databases and private stdio/HTTP MCP servers without opening inbound firewall ports using OpenZiti mutual-TLS zero-trust tunnels.",
  "category": "security-ops",
  "tags": "[\"openziti-mcp-gateway\", \"stdio\", \"security-ops\", \"mcp-server\", \"ziti-list-private-services\", \"ziti-dial-mcp-endpoint\"]",
  "agent_compatibility": "[\"grok-bot\", \"claude-code\", \"cursor\"]",
  "author_handle": "cloudflare",
  "author_name": "Cloudflare Developers",
  "author_avatar": null,
  "source_tweet_url": "https://openziti.io",
  "github_url": "https://openziti.io",
  "external_url": "https://openziti.io",
  "upvotes_count": 180,
  "installs_count": 180
}