
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
MCP server for Hubris — an OpenAI-compatible LLM gateway billed in rubles. Catalogue, balance and chat completions over stdio.
Model Context Protocol server for Hubris — an OpenAI-compatible LLM gateway with billing in rubles. Connect Claude Desktop, Claude Code, Cline, Cursor or any other MCP client to a single hosted server and get access to the model catalog, account balance and chat completions.
There are two ways in: connect your client straight to the hosted endpoint, or run the stdio server in this repository, which declares the same tools locally and forwards calls to that endpoint. The second is what you want for clients that speak stdio only, and for sandboxes that build from a Dockerfile.
Listing the tools needs no credential; only calling one does.
https://api.hubris.pw/mcpsk-gw-..., create one at hubris.pw/keys)| Tool | Description |
|---|---|
models_list | Full catalog of active models, cursor-paginated. |
models_search | Filter by capability (vision / reasoning / tools / web_search / audio_in / audio_out / image_gen / transcription), price, context length. |
models_get_pricing | Pricing for a specific model, in rubles. |
balance_get | Current account balance. |
chat_complete | LLM chat request — full parity with POST /v1/chat/completions. |
| URI | Content |
|---|---|
hubris://catalog/models | Full model catalog as a single JSON document. |
hubris://docs/quickstart | Quickstart page. |
compare-models {task} — ready-made prompt for comparing models for a given task.npm install && npm run build
HUBRIS_API_KEY=sk-gw-... node dist/index.js
Or with Docker:
docker build -t hubris-mcp .
docker run -i --rm -e HUBRIS_API_KEY=sk-gw-... hubris-mcp
In an MCP client config:
{
"mcpServers": {
"hubris": {
"command": "node",
"args": ["/path/to/hubris-mcp/dist/index.js"],
"env": { "HUBRIS_API_KEY": "sk-gw-..." }
}
}
}
HUBRIS_MCP_URL overrides the endpoint if you need to point it elsewhere.
claude mcp add --transport http hubris https://api.hubris.pw/mcp \
--header "Authorization: Bearer sk-gw-..."
Claude Desktop only speaks stdio, so remote HTTP servers go through the mcp-remote shim. Add to claude_desktop_config.json:
{
"mcpServers": {
"hubris": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://api.hubris.pw/mcp",
"--transport",
"http-only",
"--header",
"Authorization:${AUTH_TOKEN}"
],
"env": {
"AUTH_TOKEN": "Bearer sk-gw-..."
}
}
}
}
Any MCP client with Streamable HTTP transport support:
| Field | Value |
|---|---|
| Transport | Streamable HTTP |
| URL | https://api.hubris.pw/mcp |
| Auth header | Authorization: Bearer sk-gw-... |
Full connection guide (with client-specific caveats): hubris.pw/docs/integrations/mcp.
The Bearer key grants access to your account balance. We recommend creating a dedicated key for MCP at hubris.pw/keys so it can be revoked independently of other integrations.
Hubris is an OpenAI-compatible LLM gateway for the Russian market — one API key, one ruble-denominated balance, 400+ models. hubris.pw
FAQs
MCP server for Hubris — an OpenAI-compatible LLM gateway billed in rubles. Catalogue, balance and chat completions over stdio.
We found that hubris-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.