Ferentin Service Edge

devops-infra MCP Server

Hardened LLM and MCP gateway container — deployment recipes for the customer-edge service-edge image with policy enforcement, mTLS, and multi-provider routing.

Verified
devops-infradevops-infra
5 views1 stars0 forks

Why This Matters

Discovered via github-topic:model-context-protocol and last synced 3mo ago.

Verified
Source
github-topic:model-context-protocol
Stars
1
Last synced
3mo ago
Install
Check source

Install

Install instructions not detected yet

Check the source repository for the latest setup steps.

View source instructions
37
Tools
0
Resources
0
Prompts
Standard I/O
Transport

Available Tools (37)

Digest

`service-edge@sha256:...`

Ephemeral

The image runs as non-root UID 1000. Persistent volumes need `chown -R 1000:1000` (Docker) or `fsGroup: 1000` (Kubernetes). ### Bootstrap and identity

TLS_ENABLED

No

Exact

`service-edge:0.4.0`

Minor

`service-edge:0.4`

Commit

`service-edge:sha-<short>`

Platform

Guide

Render

[render/](render/)

Path

Purpose

Required

Default

ENROLLMENT_TOKEN

Yes (first run)

Variable

Required

FERENTIN_KEY_PASSPHRASE

**Yes**

TLS_PORT

No

TLS_PORT_FILTERING_ENABLED

No

ENABLE_VIRTUAL_THREADS

No

EDGE_CA_BUNDLE

No

Endpoint

Purpose

POST

MCP JSON-RPC 2.0 endpoint (Streamable HTTP transport)

Capability

Enrollment claim

llm

`capabilities.llm: true`

Major

`service-edge:0`

Persistent

Recommended (recoverable on cold start, but adds latency)

FERENTIN_KEY_PASSPHRASE_OLD

No

Port

Protocol

Registry

Image

Helm

[helm/service-edge/](helm/service-edge/)

BOOTSTRAP_ENABLED

No

mcp

`capabilities.mcp: true`

Floating

`service-edge:latest`

9443

HTTPS

Tag

Example

Railway

[railway/](railway/)

BOOTSTRAP_FORCE

No

JAVA_OPTS

No

GET

PRM discovery (alternative path)

HTTP

Health checks and actuator only. Binds at startup; LLM/MCP endpoints are blocked here unless `TLS_PORT_FILTERING_ENABLED=false`.