IBM Context Forge MCP — Casos de uso, Instalar & Demo ao vivo

Name: IBM Context Forge MCP Server
Author: IBM

Por que usar

Principais recursos

Federate multiple MCP servers behind one endpoint
Translate REST and gRPC APIs into MCP tools automatically
Built-in JWT / OAuth / Basic auth, rate limiting, retries
OpenTelemetry tracing (Phoenix, Jaeger, Zipkin) + admin UI

Demo ao vivo

Como fica na prática

mcp-context-forge.replay ▶ pronto

0/0

Instalar

Escolha seu cliente

~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "mcp-context-forge": {
      "command": "uvx",
      "args": [
        "mcp-context-forge"
      ]
    }
  }
}

Abra Claude Desktop → Settings → Developer → Edit Config. Reinicie após salvar.

~/.cursor/mcp.json · .cursor/mcp.json

{
  "mcpServers": {
    "mcp-context-forge": {
      "command": "uvx",
      "args": [
        "mcp-context-forge"
      ]
    }
  }
}

Cursor usa o mesmo esquema mcpServers que o Claude Desktop. Config de projeto vence a global.

VS Code → Cline → MCP Servers → Edit

{
  "mcpServers": {
    "mcp-context-forge": {
      "command": "uvx",
      "args": [
        "mcp-context-forge"
      ]
    }
  }
}

Clique no ícone MCP Servers na barra lateral do Cline, depois "Edit Configuration".

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "mcp-context-forge": {
      "command": "uvx",
      "args": [
        "mcp-context-forge"
      ]
    }
  }
}

Mesmo formato do Claude Desktop. Reinicie o Windsurf para aplicar.

~/.continue/config.json

{
  "mcpServers": [
    {
      "name": "mcp-context-forge",
      "command": "uvx",
      "args": [
        "mcp-context-forge"
      ]
    }
  ]
}

O Continue usa um array de objetos de servidor em vez de um map.

~/.config/zed/settings.json

{
  "context_servers": {
    "mcp-context-forge": {
      "command": {
        "path": "uvx",
        "args": [
          "mcp-context-forge"
        ]
      }
    }
  }
}

Adicione em context_servers. Zed recarrega automaticamente ao salvar.

claude mcp add mcp-context-forge -- uvx mcp-context-forge

Uma linha só. Verifique com claude mcp list. Remova com claude mcp remove.

Casos de uso

Usos do mundo real: IBM Context Forge

Centralize 10+ MCP servers behind one gateway

👤 Platform engineers at mid/large orgs ⏱ ~120 min advanced

Quando usar: Different teams run different MCPs. You need one URL for clients, one audit log, one auth story.

Pré-requisitos

Docker/Kubernetes environment — Official images at ghcr.io; Helm chart available
An auth provider (or use built-in JWT) — Existing SSO / OIDC / static JWT signer

Fluxo

Deploy the gateway

Deploy mcp-contextforge-gateway via Helm with Redis for federation state. Point it at our OIDC provider.✓ Copiado

→ Admin UI loads, auth works
Register backends

Register 3 backend MCPs (github, postgres, our-custom) in the admin UI. Apply rate limits: github=100/min, postgres=30/min.✓ Copiado

→ Backends appear as healthy in registry
Repoint clients

Update teammate Claude Desktop configs to use a single mcp-remote https://mcp-gw.company.com/mcp with their JWT.✓ Copiado

→ All backend tools available through one connection

Resultado: One place to manage MCP access across the org — centralized like any other API gateway.

Armadilhas

Rate limits applied globally but teams have different needs — Use per-user or per-JWT-claim rate limits via the policy engine — don't apply one limit to all
Gateway becomes single point of failure — Run at least 2 replicas with Redis-backed session state; health-check the /health endpoint

Combine com: cloud-run

Virtualize a REST API as MCP without writing a server

👤 Platform engineers without Python/TS bandwidth ⏱ ~60 min intermediate

Quando usar: You have an internal REST API with an OpenAPI spec. You want MCP access without writing fastapi-mcp or FastMCP code.

Pré-requisitos

OpenAPI / Swagger spec for the API — Usually /openapi.json or /swagger.json

Fluxo

Upload the OpenAPI spec

In ContextForge admin, register a new REST backend. Upload the OpenAPI spec. Confirm tool auto-generation picked up all endpoints.✓ Copiado

→ Tool list matches route list
Configure auth passthrough

Set up header forwarding so the Authorization header flows from the MCP client to the upstream REST API.✓ Copiado

→ Authenticated routes work end-to-end
Filter exposed surface

Exclude internal/admin routes via path patterns. Add a description override on the 3 most-used tools.✓ Copiado

→ Clean, agent-friendly tool list

Resultado: REST-as-MCP with zero new service code — an OpenAPI spec is enough.

Armadilhas

Auto-generated tool names are awful — Set explicit operationIds in your OpenAPI spec or override names in ContextForge per route

Add tracing and analytics to all MCP calls across your org

👤 SRE / platform observability leads ⏱ ~90 min advanced

Quando usar: You want to answer 'what did the agents do today?' across every team using MCP.

Pré-requisitos

An OTel backend (Phoenix, Jaeger, Grafana Tempo) — Running endpoint that accepts OTLP

Fluxo

Enable OTel export

Configure the gateway's otel.endpoint to point at our Phoenix instance. Include tool name, latency, user, outcome in spans.✓ Copiado

→ Spans appear in Phoenix within seconds of calls
Build dashboards

Create dashboards: top 10 tools by call volume, p95 latency per backend, error rates per user.✓ Copiado

→ Dashboards populated
Alert on anomalies

Alert on: error rate >5% for any backend, or a single user burning >10k calls/hour.✓ Copiado

→ Test alerts fire in staging

Resultado: Org-wide MCP visibility — you know who uses what and when it breaks.

Armadilhas

OTel span cardinality explodes with per-request IDs as span names — Keep span names to tool names; put request IDs in attributes, not names

Combine com: sentry

Combinações

Combine com outros MCPs para 10× de alavancagem

mcp-context-forge + cloud-run

Deploy ContextForge on Cloud Run, federate GCP-hosted MCPs behind it

Deploy ContextForge to Cloud Run with IAM auth. Register our 3 internal MCPs (also on Cloud Run) as backends.✓ Copiado

mcp-context-forge + sentry

Ship gateway traces + errors to Sentry for ops visibility

Configure the gateway's OTel export to also push errors into Sentry for on-call visibility.✓ Copiado

Ferramentas

O que este MCP expõe

Ferramenta	Entradas	Quando chamar	Custo
Gateway federation	N registered backends	Infra-level; not a per-request tool	free
REST → MCP virtualization	OpenAPI spec + target URL	Onboarding a REST service to MCP	passthrough of target API costs
gRPC → MCP translation	gRPC service descriptor	Same as above, for gRPC backends	passthrough
Prompt registry	Jinja2 templates + variables	Share prompts across teams with versioning	free
Resource registry	URI-based resources	Expose static/ dynamic org content	free
Admin API / UI	HTTP + web UI	Ops/config tasks	free

Custo e limites

O que custa rodar

Cota de API: Self-hosted — whatever your infra supports
Tokens por chamada: Gateway adds ~50ms + minimal schema overhead
Monetário: Open source (Apache 2.0); you pay for infra + backends
Dica: Start with SQLite backend for <10 servers; only move to Redis federation when you need multi-node HA

Segurança

Permissões, segredos, alcance

Armazenamento de credenciais: JWT signing keys in secret manager; never in env vars on container images

Saída de dados: Gateway → all configured backends; OTel → tracing backend

Active project — pin the version in your Helm values and review release notes before upgrading

Solução de problemas

Erros comuns e correções

Backend marked unhealthy but works when tested directly

Health checks use HEAD or GET /; your backend may only respond to POST. Configure health_check.path per backend.

JWT validation fails

Check iss and aud claims match gateway config. Also verify the JWKS endpoint is reachable from the gateway pod.

Rate limit too aggressive during spikes

Switch from fixed-window to token-bucket policy; set burst=5× average.

Admin UI login loops

Redirect URI in your OIDC provider must match /auth/callback on the gateway's external URL — verify it's set for the exact public hostname.

Alternativas

IBM Context Forge vs. outros

Alternativa	Quando usar	Troca
Kong / Apigee + custom plugins	You already run these and want to extend rather than add a new gateway	Needs plugin development; MCP not first-class
mcp-use server namespace	Single-developer use case — just wire multiple MCPs client-side	No central governance; fine for individuals not orgs
Cloudflare AI Gateway	You want a hosted SaaS gateway, not self-hosted	Less MCP-specific functionality; primarily LLM traffic focus

Mais

Recursos

📖 Leia o README oficial no GitHub

🐙 Ver issues abertas

🔍 Ver todos os 400+ servidores MCP e Skills