scientific-toolkit: fail-closed MCP gateway over 9 research repos returns NOT_INSTALLED, never fake passes
Emergency-Tutor-7 · reddit · 2026-11-02
A Reddit developer open-sourced scientific-toolkit, an MCP gateway (Python 3.11+, Apache-2.0) wrapping 9 independent research tool repos, designed fail-closed: missing tools return explicit NOTINSTALLED instead of fabricated passes.
Key points
- Upstream repos keep their own names and versions; discovery via toolkitcatalog / toolkitdoctor.
- Two transports: local stdio and bearer-token Streamable HTTP; 13 of 14 local tools are remote-safe.
- Safety design: duplicate distributions raise BADCONFIGURATION with version pinning, execution audit is opt-in and local-only, subprocess commands use fixed allowlists without a shell, nonzero exits are MCP errors, and UNKNOWN is never promoted to a pass.
- 13 CI workflows including real-upstream smoke installs and official MCP Python SDK interoperability tests.
- Author honestly flags limits: public /health shows only status and transport, third-party OAuth sign-in is unproven, and the server makes no LLM calls — the client orchestrates, never validates.
More from coding & agent
- Revolut cuts AI costs 10x by self-hosting GLM on 56 B200s, boosting lead time 70% — SumitGup · 2026-11-02
- mitsuhiko's agent-built readline rewrite sparks GPL-to-MIT license laundering debate — mitsuhiko · 2026-11-02
- Weaviate Podcast #148: MIT's 'Machine Studying' lets agents prep before tasks arrive — CShorten30 · 2026-11-02
- 4B coding model generates Three.js scenes with GLB export for Godot game assets — ConfidentDinner6648 · 2026-11-02
- Solo dev ships multiplayer party game Panic Pit with Claude Code after a stranger paid $5 — Scary_League5349 · 2026-11-02
- Turing Post Curates 10 Best Papers and Videos on Agent Harness Engineering — TheTuringPost · 2026-11-02