io.form/uag

io.form/uag·v1.11.2·Other

The Universal Agent Gateway (UAG) enables in-process agentic automation using Form.io.

Trust verdict · v1 advisory · method

NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables

PROJECT

required

API endpoint to Enterprise project or OSS server

PROJECT_KEY

secret

Project API Key (Enterprise) or ADMIN_KEY (OSS)

ADMIN_KEY

secret

Server admin key for Community Edition. Not required for Enterprise deployment.

UAG_LICENSE

secret

License for Enterprise deployment. Not required for Community Edition.

JWT_SECRET

requiredsecret

Secret used to generate and validate JWT tokens

PORT

Server port (default: 3200)

PROJECT_TTL

Project cache refresh interval in seconds (default: 900)

JWT_EXPIRE_TIME

JWT token expiration in seconds (default: 3600)

PORTAL_SECRET

secret

Enterprise Portal connection secret

MONGO

secret

Direct MongoDB connection URI (Enterprise)

MONGO_CONFIG

MongoDB driver configuration (JSON)

BASE_URL

Public URL that the UAG is hosted on

LOGIN_FORM

Public URL to login form JSON endpoint

CORS

CORS domain or JSON configuration (default: *)

DEBUG

Debug logging filter (e.g. formio.*)

MCP quality score · maturity, not trust · methodology

freshness

completeness

installability

documentation

stability

Alternatives in Other

agency.lona/trading

AI-powered trading strategy development: backtesting, market data, and portfolio analysis

ABMeter

ai.abmeter/abmeter

Feature flagging and A/B testing platform with AI-first experimentation workflows.

AdAdvisor MCP Server

ai.adadvisor/mcp-server

Query Meta Ads performance data — accounts, campaigns, ad sets, ads, metrics & settings.

Install

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "uag": {
      "command": "npx",
      "args": [
        "-y",
        "@formio/uag"
      ],
      "env": {
        "PROJECT": "<project>",
        "PROJECT_KEY": "<your-project_key>",
        "ADMIN_KEY": "<your-admin_key>",
        "UAG_LICENSE": "<your-uag_license>",
        "JWT_SECRET": "<your-jwt_secret>",
        "PORT": "<port>",
        "PROJECT_TTL": "<project_ttl>",
        "JWT_EXPIRE_TIME": "<jwt_expire_time>",
        "PORTAL_SECRET": "<your-portal_secret>",
        "MONGO": "<your-mongo>",
        "MONGO_CONFIG": "<mongo_config>",
        "BASE_URL": "<base_url>",
        "LOGIN_FORM": "<login_form>",
        "CORS": "<cors>",
        "DEBUG": "<debug>"
      }
    }
  }
}

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "uag": {
      "command": "npx",
      "args": [
        "-y",
        "@formio/uag"
      ],
      "env": {
        "PROJECT": "<project>",
        "PROJECT_KEY": "<your-project_key>",
        "ADMIN_KEY": "<your-admin_key>",
        "UAG_LICENSE": "<your-uag_license>",
        "JWT_SECRET": "<your-jwt_secret>",
        "PORT": "<port>",
        "PROJECT_TTL": "<project_ttl>",
        "JWT_EXPIRE_TIME": "<jwt_expire_time>",
        "PORTAL_SECRET": "<your-portal_secret>",
        "MONGO": "<your-mongo>",
        "MONGO_CONFIG": "<mongo_config>",
        "BASE_URL": "<base_url>",
        "LOGIN_FORM": "<login_form>",
        "CORS": "<cors>",
        "DEBUG": "<debug>"
      }
    }
  }
}

Cline (cline_mcp_settings.json)

npx -y @formio/uag

Verdict API

curl -s mcpindex.ai/api/v1/trust/server/io-form-uag

Free-tier verdict as JSON: decision + dimensions + severity. Call it from your agent before it invokes a tool it just discovered.

Details

version: v1.11.2
category: Other
quality: 81 / 100
operator: formio

Provenance

Verdict history is anchored to Bitcoin via OpenTimestamps. The free tier returns the current verdict only; the anchored record is served on the authenticated tier.

Links

Repository →