anythingmcp

AnythingMCP: the open-source MCP gateway that becomes your company brain

English · Deutsch · 简体中文 · 日本語

AnythingMCP is an open-source, self-hosted MCP gateway that connects Claude, ChatGPT, Copilot and Gemini to the software your company runs and to the documents on your file servers, without writing an MCP server.
On top of the gateway it keeps your company brain: a knowledge graph of how your systems connect, AI skills and company memory, shared by every AI client and limited by each user's role.
732 ready connectors with 12,000+ tools, among them SAP, Odoo, weclapp and Amazon Seller; 42 need no API key.

16,000+ workspaces on AnythingMCP Cloud · 1.5M+ AI tool calls a month · listed in the official Claude directory and the ChatGPT Plugin Directory

Try the Cloud free for 7 days · Add to Claude · Add to ChatGPT · Run it yourself · Docs · Connector guides · Discussions

One question in Claude, answered from Etsy, SAP and a logistics API.

https://github.com/user-attachments/assets/cc8c9ef3-11cf-4eab-aa4d-98472dc554b3

What your AI gets

A gateway forwards calls. A company brain also knows where your documents are, how your systems connect and what your company has already decided. AnythingMCP gives every AI client both, through one MCP endpoint:

The self-hosted Community edition is free under AGPL-3.0 for any use, including commercial use, for up to 3 active users, with unlimited connectors and MCP servers. More users, single sign-on, SCIM, File Search beyond the 30-day trial and support come with Enterprise, on request: contact us. Administrators can try single sign-on and SCIM for 30 days under Settings → License. Existing Starter and Team licence keys keep working.

Run it yourself

Requires Docker 24+ and openssl; on macOS, start Docker Desktop first. No clone needed:

mkdir anythingmcp && cd anythingmcp
curl -fsSLo docker-compose.yml \
  https://raw.githubusercontent.com/HelpCode-ai/anythingmcp/main/docker-compose.quickstart.yml
printf 'JWT_SECRET=%s\nENCRYPTION_KEY=%s\n' "$(openssl rand -hex 32)" "$(openssl rand -hex 32)" > .env
docker compose up -d

Open http://localhost:3000 and register: the first account becomes admin. Your MCP endpoint is http://localhost:4000/mcp, the API docs are at http://localhost:4000/api/docs.

Keep the generated .env. ENCRYPTION_KEY decrypts the credentials you store. Lose it and every connector has to be re-credentialed.

On amd64 the image pulls in about 30 s and the API is healthy 24 s later. The image is amd64 only for now; the compose file pins the platform, so it also runs on Apple Silicon under emulation.

The quickstart binds to 127.0.0.1 on purpose, because nothing in front of it terminates TLS. For an instance other people or a cloud AI client can reach, clone the repo and run ./setup.sh: it asks for a domain, gets certificates through Caddy, generates the secrets and sets the MCP auth mode. See the Deployment Guide.

How it works

1. Add a connector. Install an adapter from the catalog (a ready JSON definition for SAP, Odoo, DHL and the rest), or point AnythingMCP at your own OpenAPI spec, WSDL, GraphQL endpoint, Postman collection or database. Once configured in your workspace it is a connector, and each of its operations is an MCP tool.
2. Decide what the model sees. Rename and describe the tools in the visual editor, drop the fields that must not leave your network, and choose which roles may call which tools.
3. Hand one URL to your AI client. An MCP server is the endpoint you add to Claude, ChatGPT, Copilot, Gemini or Cursor. It exposes the connectors you assign to it, and nothing else.

Connect any API, SOAP service or database

Most companies have no MCP servers yet. They have a REST API, an ERP, a SOAP service from 2009 and a database. Each of them becomes a set of MCP tools:

Tools register at runtime, without a restart. Per-connector {{VAR}} values are interpolated on the server and never shown to the AI.

Connector catalog

732 adapters, exposing 12,000+ tools. Every one has a setup guide on anythingmcp.com/guides, in seven languages. The full catalog by category lists every Cloud connector with links to its guides for Claude, ChatGPT, Copilot, Cursor and Gemini.

An adapter is a single JSON file. That is why the catalog is this size, and why adding one is a reasonable first contribution. Missing yours? Request it (we prioritise by 👍) or build it. Your ERP isn’t listed, or it’s a custom build? Connect its REST API, its SOAP services or its SQL database directly, read-only.

Security and governance

Everything runs on your infrastructure, so you decide what leaves it. OAuth2, roles, per-tool permissions, response mapping and the audit log are in every edition; SSO and SCIM need an Enterprise licence (a 30-day trial is built in).

• Response mapping. Each tool declares exactly which fields reach the model: drop a customer’s IBAN or an employee’s salary, or name the fields to keep. The editor shows the before/after on a real response; a shipped adapter goes from 12,172 B to 1,072 B (−91%), so you also stop paying for those fields in the context window. A broken mapping returns the raw response by default; set "fallbackToRaw": false on tools whose fields must never travel, and the call fails instead.
• Read-only where it matters. Every tool carries MCP annotations (readOnlyHint, destructiveHint), derived from the operation and overridable per tool. Role-based tool whitelisting lets you publish an MCP server that can only read, which is how most people should start with an ERP. Database query tools run a single SELECT and block writes and stacked statements.
• Every auth scheme you will meet. OAuth2 (PKCE and Client Credentials), Bearer, API key, Basic, HMAC request signing, LOGIN_TOKEN and OAuth 1.0a. Credentials are encrypted at rest with AES-256-GCM.
• Audit log. Every tool call is recorded with input, output, duration and status in your own database, including the full upstream response the model never saw.
• SSO and SCIM (Enterprise). Entra ID, Google, Okta, Auth0 or any OIDC provider. Roles sync from your directory groups on every sign-in; disable someone in the directory and their workspace access and MCP API keys go with it.

{
  "transform": {
    "mode": "select",
    "fallbackToRaw": false,
    "exclude": ["customer.iban", "customer.taxId"],
    "select": { "order": "$.id", "total": "$.amounts.gross", "status": "$.state" }
  }
}

Response mapping reference

Use it from Claude, ChatGPT, Copilot and Gemini

The same MCP server works in every client that speaks MCP, so you build a connector once:

• Claude. Add the server URL as a custom connector under Customize → Connectors; it then works in Claude.ai, Claude Desktop and Claude Code. OAuth 2.0 is supported out of the box. On AnythingMCP Cloud you can also add it in one click from the Claude Directory. Claude setup
• ChatGPT. On AnythingMCP Cloud, the AnythingMCP plugin in the ChatGPT Plugin Directory answers questions from your company databases, read-only. For every connector, add the server under Plugins in ChatGPT (Add → Add custom MCP server), or use it as the tool layer of an Apps SDK app. ChatGPT setup
• Meta Muse. In Muse, open Settings → Connectors → Add custom connector, paste the server URL and sign in to AnythingMCP. Muse setup
• Copilot, Gemini, Cursor and other MCP clients: client setup guides.

Company brain: knowledge graph, AI skills and memory

Forwarding calls leaves the hard part to the agent: knowing which tool to call next, and what your business means by “open order”. AnythingMCP learns both and hands them back as context, not as extra tool calls.

• Knowledge Graph. A per-workspace map of entities (customers, orders, products) and how they relate across connectors, built from tool definitions and real calls, and editable by hand. It stores field names and relationships, never values. Each server exposes it through a kg_how_to_obtain tool, so the agent can ask how to get from a Shopware order to a DHL tracking number.
• AI skills. Recurring usage turned into small rules (“today’s revenue includes order statuses 2, 3 and 4”) and step-by-step procedures, written by hand or learned from real requests and fixed errors, versioned, and approved by an admin before they are composed into the server’s instructions.
• Company memory (Enterprise). AI clients save facts, preferences and notes with memory_save and find them again with memory_search, in any client connected to the workspace. My memory stays private to one user; company memory (“STAMMKUNDE means a customer with a framework agreement”) is for everyone, in folders limited by role. It is served as information written by people, never as instructions. Memory guide

Change the assistant, keep the brain: Copilot today, Claude tomorrow, an n8n agent tonight all find the same graph, skills and memory.

The AI passes are off by default and use your own OpenAI, OpenRouter or Anthropic key; the graph, the editor and the MCP tool work without one. Knowledge Graph guide

Where it fits

Most MCP gateways federate and secure MCP servers you already have. AnythingMCP starts one step earlier: it creates the MCP servers from the APIs, ERPs and databases you already run, then serves, scopes and audits them behind one endpoint. If your tools are already MCP servers and all you need is federation, a pure gateway may be enough. Side-by-side comparisons: anythingmcp.com/vs.

FAQ

What is an MCP gateway?

A single MCP endpoint in front of many tools, which handles authentication, access control and audit for all of them. AI clients such as Claude and ChatGPT connect to the gateway instead of to each system. AnythingMCP is a gateway that also generates the tools, from APIs and databases that have no MCP server of their own.

How do I connect my ERP (SAP, Odoo, Xentral…) to Claude or ChatGPT?

Install the ERP’s adapter from the catalog, enter the API credentials, and add your MCP server URL to Claude as a custom connector or to ChatGPT as an app. If your ERP has no adapter, connect its REST or SOAP API or its SQL database directly. Start with a role that can only read.

How do I turn an OpenAPI spec into an MCP server?

Create a REST connector and import the spec by URL or by pasting it. Every operation becomes an MCP tool on your server’s /mcp endpoint, with no code. How it works

Can I connect a SOAP/WSDL service to Claude?

Yes. AnythingMCP parses the WSDL, turns each operation into a tool and builds the SOAP envelope on every call, WCF services included. It authenticates with HTTP Basic, Bearer, an API-key header or a WS-Security UsernameToken; signed WS-Security messages are not supported yet. SOAP connector docs

Can Claude query my SQL Server, Oracle or PostgreSQL database safely?

Query tools are read-only by default. On top of that, use a database user with SELECT rights only, prefer static queries where the model supplies just the parameters, and whitelist the tools per role. Response mapping drops the columns that must not reach the model, and every query lands in your audit log.

How do I let Claude or ChatGPT search the documents on our file server?

Add a File Search connector and point it at the folder over SFTP, FTP/FTPS, WebDAV (Nextcloud, ownCloud, Synology or QNAP NAS), S3 or a mounted network share. AnythingMCP indexes PDFs page by page, Excel rows with their column names, Word, PowerPoint and Outlook mails, keeps the index in sync, and gives every AI client search, find, grep and read tools that answer with file, page and date. Folder permissions per role are available on Enterprise. File Search docs

Can ChatGPT, Claude and Copilot share the same company memory?

Yes. With workspace memory (Enterprise), anything saved from one AI client is found by the others, because the memory lives in AnythingMCP, not in the client. Personal items stay private to their author; company items are shared within folder and role limits. Memory docs

What is a company brain for AI agents?

The knowledge an AI needs beyond tool access: where your documents are, how your systems link (the knowledge graph), how your company works (AI skills) and what it has decided (company memory). AnythingMCP keeps all of it in your own instance and serves it to every MCP client within each user’s role.

Can an AI agent run code against my tools safely?

With Code Mode, a short JavaScript program calls several tools in one step. It runs in a separate code-runner container with no filesystem, network, environment or secrets; it can only call the tools the user may already use, and every inner call is governed and audited like a direct one. It is off until an operator enables it. Code Mode docs

How do I connect Shopware, WooCommerce or Amazon Seller Central to Claude?

Install the e-commerce adapter for your shop or marketplace and authorise it. WooCommerce comes with 49 tools, Amazon Seller Central uses the official Selling Partner API, and the Shopware 6 adapter reads the storefront catalog through the Store API.

Community and support

In production at KOCH Freiburg GmbH, where it connects AI assistants to 15+ internal systems: ERP, CRM, SOAP services and on-prem databases. helpcode.ai extracted it from that system and open-sourced it, because an adapter catalog grows faster as a community than as a product.

• 💬 Questions and ideas: GitHub Discussions. Vote on the next adapter, share what you’ve built.
• 🐛 Bugs and features: Issues · Support
• 👥 Adopters: who runs AnythingMCP in production, and how to add yourself
• 🔐 Security: please do not open a public issue; follow the security policy
• 🤖 For AI agents and crawlers: anythingmcp.com/llms.txt
• 🤖 Repository documentation for AI agents: llms.txt · Full text
• 🏢 Built by helpcode.ai in Freiburg, Germany. AI-assisted development, human-reviewed: AUTHORS.md says which parts and how.

Contributing

Read the Contributing guide before opening a PR. The easiest useful contribution is an adapter: one JSON file, and there is a walkthrough issue for it.

License

Open source under the GNU Affero General Public License v3 (AGPL-3.0-only). Commercial use inside your own company is included and always was; the copyleft obligation only starts if you modify AnythingMCP and offer the modified version to others over a network. Code under ee/ (Cloud operations, the File Search sync engine, edition licensing) is under the AnythingMCP Commercial License and is not required to run the gateway; see the License FAQ.