LLM CLI Gateway MCP server
io.github.verivus-oss/llm-cli-gateway·v1.17.1·16 starsOne MCP endpoint for Claude Code, Codex, Gemini, Grok and Mistral CLIs, with durable async jobs.
16 stars82 downloads/wk
Reviews
Write oneNobody has reviewed LLM CLI Gateway yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
LLM CLI Gateway tools (26, 3 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
approval_listclaude_requestclaude_request_asynccli_upgradecli_versionscodex_fork_sessioncodex_requestcodex_request_asyncgemini_requestgemini_request_asyncgrok_requestgrok_request_asynclist_modelsllm_job_cancelwrite actionllm_job_resultllm_job_statusllm_process_healthmistral_requestmistral_request_asyncsession_clear_allsession_createwrite actionsession_deletewrite actionsession_getsession_listsession_set_activeupstream_contracts
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan95 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 6 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- mediumeval / new Function used
exec.evalsocket.yml: … compiles JSON Schema validators using `new Function(...)`. # This is ajv's standard code…
How LLM CLI Gateway compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 83/100
- higher than 68% of 4,461 AI and agents servers
- Tools
- 26
- the typical AI and agents server has 6
- Tools that change things
- 12%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 16
- more than 87% of 2,713 AI and agents servers
- Downloads a week
- 82
- more than 57% of 1,554 AI and agents servers with a package
What its tools let an agent do: 23 read · 3 change
Install LLM CLI Gateway in Claude Code, Cursor or VS Code
Runs npx -y llm-cli-gateway on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add llm-cli-gateway -- npx -y llm-cli-gateway
What the publisher says
From the LLM CLI Gateway repository's README, as published. We do not edit it. Read it on GitHub
llm-cli-gateway
"Without consultation, plans are frustrated, but with many counselors they succeed."
— Proverbs 15:22 (LSB)
Secure local control plane for AI coding agents.
llm-cli-gateway lets supported MCP clients operate Claude Code, Codex, Gemini/Antigravity, Grok Build, Mistral Vibe, Cognition Devin, Cursor Agent, and configured HTTP API providers through one user-owned gateway while preserving native CLI sessions, local credentials, durable async jobs, validation receipts, and review workflows.
Why developers try it: use the client you are already in to delegate work to local coding agents, scope remote execution to registered workspaces, gate risky actions, survive disconnects, and collect auditable review evidence without turning those agents into a generic chat proxy.
Current signals: CI and security workflows pass on main, OpenSSF Scorecard is published, OpenSSF Best Practices is passing, releases use Sigstore signing, and the package is MIT licensed.
Quick Start
npm install -g llm-cli-gatewayOr use directly with npx from an MCP client:
{
"mcpServers": {
"llm-gateway": {
"command": "npx",
"args": ["-y", "llm-cli-gateway"]
}
}
}What It Provides Today
llm-cli-gateway is a single-user MCP control plane for operating AI coding agents from supported local or remote clients. It is more than a thin CLI wrapper:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
LLM CLI Gateway: common questions
- Is LLM CLI Gateway MCP server safe?
- Mostly: it is graded B (83/100). Read the LLM CLI Gateway safety report
- How do I install LLM CLI Gateway?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does LLM CLI Gateway need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is LLM CLI Gateway maintained?
- The last commit was 45 days ago (2026-09-21). The latest release is v1.17.1.
- What can I use instead of LLM CLI Gateway?
- Servers from other publishers that do the same job: REA MCP server, Agent-Native Chat MCP server and SuperCompress MCP server.
- How does LLM CLI Gateway compare with other AI and agents MCP servers?
- safety score 83/100 (higher than 68% of 4,461 AI and agents servers); tools 26 (the typical AI and agents server has 6); tools that change things 12% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to LLM CLI Gateway
Same job from other publishers: the closest match first, then the best rated.
- REAReverse engineer anything from your terminal or agent with one CLI and MCP server.not reviewedWidely usedA
- Agent-Native ChatMinimal chat-first app with durable threads, actions, and the app-agent loopnot reviewedEstablishedA
- SuperCompressCompress coding-agent context ~64%. Hosted Neural Keep MCP for Cursor/Claude/Codex.not reviewedEstablishedB
- DCC-MCP CoreAgent control plane for DCC and engine hosts: one MCP endpoint, one tool contract.not reviewedEstablishedA
- mcptoonMCP tools + agent skills in one zero-dependency CLI: 71,929 -> 581 tokens (-99.2%, measured).not reviewedEstablishedA