Minibridge
@acuvity
Make your MCP servers secure and production ready
Overview
What is Minibridge?
Minibridge is a backend-to-frontend bridge that streamlines and secures communication between AI Agents and MCP servers. It safely exposes MCP servers to the internet and can optionally integrate with policing services (Policers) for agent authentication, content analysis, and transformation.
How to use Minibridge?
Install Minibridge via Homebrew, AUR, Go toolchain, or download a binary from the release page. In your MCP client configuration, replace the original server command with minibridge aio -- <original command> to wrap the server in all-in-one mode, enabling SBOM checks and policy enforcement.
Key features of Minibridge
- Secure TLS transport with optional client certificate validation
- SBOM generation and real-time integrity validation
- Prometheus metrics monitoring
- OpenTelemetry tracing and span reporting
- Configurable Policers via remote HTTP or local OPA Rego policies
- All-in-one mode for single-process deployment
Use cases of Minibridge
- Securely exposing local MCP servers to the internet
- Enforcing agent authentication and content policies on MCP requests
- Monitoring and tracing MCP server interactions with OpenTelemetry
- Validating MCP tool integrity to prevent mutation during execution
- Transporting user identity information to a policy enforcement layer
FAQ from Minibridge
What does Minibridge provide that plain MCP does not?
Minibridge adds TLS support, tool integrity checks, visualization/tracing, and optional policy management for security controls not available in the basic MCP protocol.
How can I install Minibridge?
You can install via Homebrew (brew tap acuvity/tap && brew install minibridge), AUR (yay -S minibridge), Go (go install go.acuvity.ai/minibridge@latest), or download a binary from the GitHub releases page.
How do I configure Minibridge in my MCP client?
Replace the MCP server command in your client configuration JSON with minibridge aio -- <original command>. Ensure the minibridge binary is on your system PATH or use the full path.
What transport and security mechanisms does Minibridge support?
Minibridge supports TLS with optional client certificate validation, Prometheus metrics, and OpenTelemetry for tracing spans from MCP calls and standard OTEL headers.
Can I write custom policies for Minibridge?
Yes, Policers can be implemented remotely via HTTP or locally using OPA Rego policies for authentication, content analysis, and transformation.

