Skip to main content

VectorStep Gateway MCP

An MCP server that exposes VectorStep Gateway — agent authoring and inspection — to MCP clients such as Claude Code and Claude Desktop.

What it is

A separate, standalone repository and process with no import-level dependency on the Gateway — the two are coupled only over HTTP, so each can be developed, versioned, and deployed independently.

It lets an MCP client create and edit agents (agent.yaml + soul.md, with the same validation the gateway itself uses), inspect what's available (configured MCP tool servers and their tools, configured LLM providers), and read gateway health/metrics. Pipelines/steps are not authored here — that's the job of the companion VectorStep-Service-MCP; the two have clean, non-overlapping tool sets.

Quick start

python3 -m venv .venv
.venv/bin/pip install -e .

CI runs this repo's test suite on every push and pull request (.github/workflows/tests.yml).

Then register it with your MCP client, pointing at a running Gateway instance:

claude mcp add vectorstep-gateway \
  --env GATEWAY_BASE_URL=http://127.0.0.1:18780 \
  --env GATEWAY_OPERATOR_TOKEN=<your-admin-token> \
  -- /absolute/path/to/VectorStep-Gateway-MCP/.venv/bin/python -m vectorstep_gateway_mcp

GATEWAY_OPERATOR_TOKEN must be the Gateway's admin token, not its invoke token — every tool this server exposes (creating/editing agents, /reload, even POST /agents/validate) needs the admin scope. The Gateway prints both tokens on first boot (admin and invoke); the invoke token is for the VectorStep service's own executors.gateway.token, not for this MCP server. See Gateway authentication.

If the Gateway is running via the VectorStep-Dist Docker Compose stack, GATEWAY_BASE_URL=http://127.0.0.1:18780 won't resolve — that stack no longer publishes the Gateway's port to the host by default. Add a ports: entry to the compose file's gateway service and docker compose up -d to apply it; see that repo's README.

Full install, client config (Claude Code, Claude Desktop, MCP Inspector), and tool inventory: MCP servers.

Documentation

Full docs at vectorstep.io:

Section Covers
MCP servers Install, client config, tool inventory, write-path design notes for both MCP servers
Gateway Agent authoring (agent.yaml, soul.md) that this server exposes

The ecosystem

Repo Role
VectorStep The orchestration service: webhook intake, pipeline runner, trust gating, UI, analytics
VectorStep-Gateway WebSocket gateway that runs agents: LLM providers, MCP tools, the full agentic loop
VectorStep-Service-MCP MCP server exposing pipeline authoring, run inspection and analytics to Claude Code/Desktop
VectorStep-Gateway-MCP MCP server for authoring and inspecting Gateway agents

Licence

VectorStep Gateway MCP is proprietary software, free to download and use under the terms in LICENSE. It's installable from PyPI — that's the Licensor's own distribution channel, not a grant for you to redistribute it further — and this GitHub repository is private.

Bug reports, questions, and feature requests are welcome at contact@vectorstep.io. Code contributions are not accepted — see clause 6 of the licence. For a suspected vulnerability, follow SECURITY.md rather than emailing the address above.

Metadata

Release files for vectorstep-gateway-mcp 0.1.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for vectorstep-gateway-mcp 0.1.2
File Size Uploaded Provenance
vectorstep_gateway_mcp-0.1.2.tar.gz 23.1 kB With provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for vectorstep-gateway-mcp 0.1.2
File Interpreter ABI Platform
vectorstep_gateway_mcp-0.1.2-py3-none-any.whl Python 3 none any Details

Total release size: 40.6 kB

Release files / vectorstep_gateway_mcp-0.1.2.tar.gz

Download URL vectorstep_gateway_mcp-0.1.2.tar.gz
Size 23.1 kB
Tags Source
SHA-256 checksum
How to use checksums
9592bac98f5d5b2018bc246644da199dd7c5251277d63a45cbce7c96ddfc5b9b
BLAKE2b-256 checksum
How to use checksums
cbbab70b7a025eb04822a0984205d90d8685e8016ea47db45bcdf96ba0333276
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 2, 2026.

Transparency log

Release files / vectorstep_gateway_mcp-0.1.2-py3-none-any.whl

Download URL vectorstep_gateway_mcp-0.1.2-py3-none-any.whl
Size 17.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
c7d681cfae7de48b330d6479e009f21403b979dc23e3d402e484d281be17cea9
BLAKE2b-256 checksum
How to use checksums
e8096ade8b4e66f06a0f3a770455ed79f5d283e080c966f71698f53fc33bf0eb
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 2, 2026.

Transparency log

Security for vectorstep-gateway-mcp 0.1.2

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for vectorstep_gateway_mcp-0.1.2.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 2, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page