otgate

Item: otgate
Rating: 69
Author: M8ven

An OT-aware authorization MCP server for OPC UA that applies process-aware policies (value ranges, rate limits, interlocks) to every agent call, enabling safe industrial control with optional human approval workflows.

→ alikup-ai/otgate · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: OTGATE_OPERATOR_TOKEN, OTGATE_AGENT_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configOTGATE_BACKEND— fake fake or asyncua

configOTGATE_OPCUA_ENDPOINT— required when backend is asyncua

configOTGATE_AUDIT— audit.jsonl audit log path

configOTGATE_SHADOW— (off) 1/true to enable shadow mode

configOTGATE_RATE_HISTORY— (in-memory) path to a JSONL file to make rate-of-change history survive restarts

configOTGATE_POLICY— examples/reactor_policy.yaml policy YAML path

configOTGATE_AGENTS— path to agents.yaml for multi-agent mode (overrides single-agent)

🔐 secretOTGATE_OPERATOR_TOKEN— bearer token for the operator HTTP channel (must differ from every agent token)

configOTGATE_HOST— / OTGATE_AGENT_PORT / OTGATE_OPERATOR_PORT 127.0.0.1 / 8770 / 8771 HTTP bind host and ports

configOTGATE_AGENT_PORT— OTGATE_HOST / / OTGATE_OPERATOR_PORT 127.0.0.1 / 8770 / 8771 HTTP bind host and ports

configOTGATE_OPERATOR_PORT— OTGATE_HOST / OTGATE_AGENT_PORT / 127.0.0.1 / 8770 / 8771 HTTP bind host and ports

🔐 secretOTGATE_AGENT_TOKEN— bearer token for the single-agent HTTP channel

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/alikup-ai-otgate-1gvoa5)](https://m8ven.ai/mcp/alikup-ai-otgate-1gvoa5)

commit: 205767f204d2046beaf40b81738c09ac02a6ba22

code hash: ea4598d51e1d505dffd5d1e6faeaf798f89baa35fd2aff8b52616f42d0a7454d

verified: 7/25/2026, 8:36:01 AM

view raw JSON →