
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
perforce-agentic-gateway
Advanced tools
Local MCP gateway that proxies AI clients to many MCP servers with a token-efficient code mode
PAG is a local MCP gateway with a token-efficient code mode. You configure your AI client once to connect to PAG, and manage every other MCP server through PAG: it runs the server processes, restarts them when they crash, and keeps their credentials in your OS keychain.
Perforce products ship as first-party servers, and PAG proxies any MCP server — add third-party servers from a registry or by manual configuration.
PAG runs via uv; there is no separate install step. Point your AI client at it — for example, Claude Code:
claude mcp add pag -- uvx perforce-agentic-gateway@latest
Any client that uses .mcp.json (Cursor, and others):
{
"mcpServers": {
"pag": {
"command": "uvx",
"args": ["perforce-agentic-gateway@latest"]
}
}
}
Browse the catalog and manage servers in the dashboard with
uvx perforce-agentic-gateway@latest view.
Rather than forwarding every downstream tool to your client (20 servers can
mean a thousand tools), PAG exposes a small, fixed pag__* toolset and keeps
the full catalog inside the gateway. Your assistant searches it with
pag__explore and runs multi-step workflows — loops, fan-out across servers —
through pag__execute in one round trip instead of many.
Use of PAG is governed by the Perforce Agentic Gateway Terms of Use.
FAQs
Local MCP gateway that proxies AI clients to many MCP servers with a token-efficient code mode
We found that perforce-agentic-gateway demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.