DM
All open source

MCP server

Open source (MIT)

Plugging a self-hosted AI agent into Claude, without exposing anything

Plug a self-hosted AI agent into Claude, web and mobile, without exposing anything to the Internet, and without giving the agent the right to approve its own work.

Code on GitHubRead the full article (in French)

0

open ports on the server

Key points

  • 7 tools (kanban, files produced by the agent, one-off question), all through Hermes' public API: no Docker socket, no database.
  • No tool to approve a card. The agent proposes, a human approves. A test fails if anyone adds that code.
  • The server checks the Cloudflare Access token itself: the network protects from the Internet, not from neighbouring containers.
  • The tests first check that a real token passes: a validator that rejects everything looks like a correct validator.

Technical stack

PythonMCPCloudflare AccessDocker

What this means for you

This is exactly the step from prototype to production: security, a human guardrail, useful tests.

Prototype → Production

Other projects

EcoDrive OBD

Android app

Read the case

Voltdeck

Mobile app

Read the case

A similar need?

30 minutes to look at your situation and tell you honestly how I would approach it, whether you work with me or not.

Book a free audit (30 min)