jetski MCP — Сценарии использования, Установка & Живое демо

Зачем использовать

Ключевые функции

OAuth 2.1 + Dynamic Client Registration (DCR) with Dex OIDC
Real-time debug logs of requests, responses, errors
Prompt-level analytics: which prompts triggered which tools
Auto-generated client onboarding guides (per-client copy/paste)
Zero code changes to upstream MCP servers

Живое демо

Как выглядит на практике

jetski.replay ▶ готово

0/0

Установка

Выберите клиент

~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "jetski": {
      "command": "npx",
      "args": [
        "-y",
        "jetski"
      ],
      "_inferred": true
    }
  }
}

Откройте Claude Desktop → Settings → Developer → Edit Config. Перезапустите после сохранения.

~/.cursor/mcp.json · .cursor/mcp.json

{
  "mcpServers": {
    "jetski": {
      "command": "npx",
      "args": [
        "-y",
        "jetski"
      ],
      "_inferred": true
    }
  }
}

Cursor использует ту же схему mcpServers, что и Claude Desktop. Конфиг проекта приоритетнее глобального.

VS Code → Cline → MCP Servers → Edit

{
  "mcpServers": {
    "jetski": {
      "command": "npx",
      "args": [
        "-y",
        "jetski"
      ],
      "_inferred": true
    }
  }
}

Щёлкните значок MCP Servers на боковой панели Cline, затем "Edit Configuration".

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "jetski": {
      "command": "npx",
      "args": [
        "-y",
        "jetski"
      ],
      "_inferred": true
    }
  }
}

Тот же формат, что и Claude Desktop. Перезапустите Windsurf для применения.

~/.continue/config.json

{
  "mcpServers": [
    {
      "name": "jetski",
      "command": "npx",
      "args": [
        "-y",
        "jetski"
      ]
    }
  ]
}

Continue использует массив объектов серверов, а не map.

~/.config/zed/settings.json

{
  "context_servers": {
    "jetski": {
      "command": {
        "path": "npx",
        "args": [
          "-y",
          "jetski"
        ]
      }
    }
  }
}

Добавьте в context_servers. Zed перезагружается автоматически.

claude mcp add jetski -- npx -y jetski

Однострочная команда. Проверить: claude mcp list. Удалить: claude mcp remove.

Сценарии использования

Реальные сценарии: jetski

Add OAuth to an MCP server that doesn't speak it

👤 Platform teams deploying MCPs to users beyond themselves ⏱ ~60 min advanced

Когда использовать: Your MCP works great locally but the upstream has no auth; you need identity before exposing it.

Предварительные требования

Kubernetes cluster (or k3s/minikube for dev) — Jetski uses Metacontroller + CRDs
PostgreSQL — Any reachable PG; Jetski creates its schema

Поток

Deploy Jetski

Apply Jetski's Helm chart to my cluster; confirm all pods ready.✓ Скопировано

→ Gateway + dashboard live
Register your MCP upstream

Add my internal MCP at svc.internal:9000 behind Jetski with OAuth required.✓ Скопировано

→ Jetski URL returned
Share onboarding link

Give me the copy/paste Claude Desktop config for this gateway URL.✓ Скопировано

→ Working config snippet

Итог: An authenticated, per-user MCP without touching upstream code.

Подводные камни

Dex OIDC misconfig leaves users in a redirect loop — Verify issuer URL matches what clients see externally (not internal cluster DNS)
DCR creates tons of orphan clients over time — Prune stale clients periodically; Dex supports TTL

Сочетать с: agent · proxy-2

See exactly which prompts trigger which tools

👤 MCP authors and prompt engineers ⏱ ~30 min intermediate

Когда использовать: Users report 'it's not working' and you have no visibility into what they're saying.

Поток

Open analytics

Show me today's top 10 prompts and the tool calls each triggered.✓ Скопировано

→ Prompt-to-tool breakdown
Find the failure pattern

Filter to tool calls that returned errors. What's the common prompt shape?✓ Скопировано

→ Error clusters
Improve tool description

Propose a tool-description tweak that would route ambiguous prompts to the right tool.✓ Скопировано

→ Concrete change

Итог: Data-driven improvements to your tool surface.

Onboard a teammate in one click

👤 Team leads adding people to MCP tooling ⏱ ~10 min beginner

Когда использовать: You've set up a gateway and don't want to write setup docs.

Поток

Generate onboarding

Give teammate Alice a one-click onboarding URL for the gateway.✓ Скопировано

→ Shareable URL with per-client instructions
Verify

Confirm Alice shows up in today's analytics and her tokens are provisioned.✓ Скопировано

→ Alice visible, tools callable

Итог: Zero-doc onboarding.

Комбинации

Сочетайте с другими MCP — эффект x10

jetski + agent

1mcp/agent aggregates; Jetski adds analytics on top

Put 1mcp/agent behind Jetski so we get aggregation + OAuth + analytics in one stack.✓ Скопировано

jetski + vurb-ts

Build with Vurb, operate behind Jetski

Deploy my Vurb-built MCP behind Jetski for auth and observability without code changes.✓ Скопировано

Инструменты

Что предоставляет этот MCP

Инструмент	Входные данные	Когда вызывать	Стоимость
(gateway)	All upstream MCP tools pass through with OAuth	Any tool invocation through Jetski	1 upstream call
admin_register_upstream	name, url, auth_required	Adding a new upstream (admin-only)	free

Стоимость и лимиты

Во что обходится

Квота API: None — passes through
Токенов на вызов: Minimal gateway overhead
Деньги: Free, open source
Совет: Run Postgres on a small shared instance; logs and analytics are the main storage cost.

Безопасность

Права, секреты, радиус поражения

Минимальные скоупы: OAuth configuration at your IdP

Хранение учётных данных: Env-driven; Postgres holds sessions + client registrations

Исходящий трафик: Upstream MCP calls; OIDC to your configured IdP

Никогда не давайте: Admin scope to end users

Analytics capture prompts — treat the logs as sensitive and size retention accordingly.
DCR accepts dynamic client registration; rate-limit the endpoint to avoid abuse.

Устранение неполадок

Частые ошибки и исправления

OIDC issuer mismatch

Issuer URL in Dex must match what clients see externally, not internal cluster DNS.

Проверить: curl /.well-known/openid-configuration from outside

Empty analytics dashboard

Ensure gateway is in front of at least one request; dashboard updates in near-real-time.

Проверить: Make a test tool call and refresh

PG connection errors

Verify DATABASE_URL env and network policy allow gateway → PG.

Проверить: kubectl exec into gateway pod and psql the URL

Альтернативы

jetski в сравнении

Альтернатива	Когда использовать	Компромисс
1mcp/agent	You want OAuth + aggregation without K8s	No Postgres-backed analytics dashboard
tbxark/mcp-proxy	Minimal; just aggregate, no auth	No auth, no analytics
Build your own with Kong/Envoy	You already have a service-mesh culture	Significant custom work for MCP-specific routing

Ещё

Ресурсы

📖 Читать официальный README на GitHub

🐙 Открытые задачи

🔍 Все 400+ MCP-серверов и Skills