Show HN: Klavis AI – Open-source MCP integration for AI applications
53 comments
·May 5, 2025barefeg
For some time, authentication was not part of the MCP. Now it’s there https://modelcontextprotocol.io/specification/2025-03-26/bas... so I’m wondering what is being addressed in Klavis. Is it something that the reference implementation of MCP lacks? If so, will it eventually make it to MCP?
I think it’s important to release SDKs that are secure by default, so not providing this in the reference MCP would be a big issue.
In my view, MCP should be maintained by the vendors themselves. It’s too complicated to use in the enterprise if everything comes from the community with questionable security. So I applaud initiatives that try to solve this. I think smithery.ai provides something similar while also being a repository of servers (I’m not associated with them), but again the problem is needing to trust an extra middleman vendor.
Does anyone else share this view? For example, will AWS (or insert any other hyperscaler) end up providing the “Bedrock” of MCP where security is native to the platform? Or will individual companies (Box, Google, MS, etc.) start rolling them out as part of their standard developer APIs?
wirehack
Yes thank you! the newest MCP spec added the authentication part but it seems that people think it is still not perfect and are doing more modifications to the auth part. E.g. https://github.com/modelcontextprotocol/modelcontextprotocol.... We will also keep an eye on the spec development.
throwup238
> For example, will AWS (or insert any other hyperscaler) end up providing the “Bedrock” of MCP where security is native to the platform?
Cloudflare already provides something along those lines with MCP on Workers with authentication (via their zero trust product AFAIK): https://blog.cloudflare.com/remote-model-context-protocol-se...
Sounds like they were one of the partners with Anthropic in their recent “Integrations” announcement.
BrandiATMuhkuh
Looking great!
I'm actually actively looking for something like this. But I'm not sure it fulfills my requirements.
Here is what I'm looking for - curated open source MCP servers - trusted curator - direct oauth integration, so the user permission is taken over (e.g.: you login with your companies Microsoft account and not with the account of the AI-Client.) this is a must for enterprise - easy to ship (eg.: via electron app) - I as the developer or the company owner can decide what servers are available to the user, and what tools (e.g.: most companies I talk to want read only access for their employees)
If Klavia fulfills that I would like to have a chat :)
wirehack
Hi yes it sounds like Klavis AI meets your requirement. Can you shoot me an email at xiangkaiz@klavis.ai? Happy to chat!
pzo
This looks great will definitely have a look. What I wish that there was also MCP client (SDK) for mobile devices either native (Swift / Kotlin ) or React Native / Expo ( ideally with integration with vercel ai sdk). For mobile dev this would simplify setup (not need to have a proxy server) and allow business models with end-user Bring-Your-Own-Key.
wirehack
Thanks! I think our hosted version has an API endpoint satisfy your needs on mobile devices. You can use our API to call any remote MCP server tools directly. https://docs.klavis.ai/api-reference/mcp-server/call-tool.
Regarding SDKs, yes we are planning to add SDKs as well. The Vercel AI SDK is definitely an interesting one. I will take a look.
TZubiri
This looks like it would add nothing. MCP's were released like 2 seconds ago, if you want to build something in prod, you can build it against the official MCP code.
If you want to add something in the middle or a MCP specific dependency it should add some value, some specific value: industry specific, or add some specific feature.
This is just a generic dependency that provides overly generic features like "production ready" and "integration" (that's true for all dependencies.
Par for the course for AI companies, "do everything for everyone"
foobahhhhh
It's vibefrastructure. Vibe coders don't do prod-ready but they can lean on services like this. See also: vercel, firebase etc.
wirehack
haha I like the word vibefrastructure!
danenania
This looks interesting! I'll be keeping an eye on it. A few questions that come to mind:
- Is there a way to run it locally/self-host?
- Are there discovery endpoints to list the available servers?
- The 'Test & Eval' page is interesting to me, as I think unpredictability of results with multiple MCP prompts/sources interacting is generally a pretty big issue with MCP, so a good integrated eval system could be valuable. I see it's not launched yet, but it would be great to know more about how this will work.
mlenhard
Agree on the unpredictability of results issue. Tool call selection is still sort of a black box.
How do you know what variations of a prompt trigger a given tool to be called or how many tools is too many before you start seeing degradation issues because of the context window. If you are building a client and not a server the issue becomes even more pronounced.
I even extracted the Claude electron source to see if I could figure out how they were doing it, but it's abstracted behind a network request. I'm guessing the system prompt handles tool call selection.
PS: I released an open source evals package if you're curious. Still a WIP, but does the basics https://github.com/mclenhard/mcp-evals
danenania
Thanks, I'll check it out.
I'm working on a coding agent, and MCP has been a frequently requested feature, but yeah this issue has been my main hesitation.
Getting even basic prompts that are designed to do one or two things to work reliably requires so much testing and iteration that I'm inherently pretty skeptical that "here are 10 community-contributed MCPs—choose the right one for the task" will have any hope of working reliably. Of course the benefits if it would work are very clear, so I'm keeping a close watch on it. Evals seem like a key piece of the puzzle, though you still might end up in combinatorial explosion territory by trying to test all the potential interactions with multiple MCPs. I could also see it getting very expensive to test this way.
mlenhard
I actually came across Plandex the other day. I haven't had the chance to play around with it yet, but it looked really cool.
But agree that even basic prompts can be a struggle. You often need to name the tool in the prompt to get things to work reliably, but that's an awful user experience. Tool call descriptions play a pretty vital role, but most MCP servers are severely lacking in this regard.
I hope this a result of everything being so new and the tooling and models will evolve to solve these issues over time.
wirehack
> Is there a way to run it locally/self-host?
Yes our github page has README for all MCP servers and clients. You can checkout https://github.com/Klavis-AI/klavis.
> Are there discovery endpoints to list the available servers?
Yes. https://docs.klavis.ai/api-reference/mcp-server/get-all-serv.... And we are adding more MCP servers.
> Testing and Eval
Yes it is early access now. If you are interested, shoot me an email at xiangkaiz@klavis.ai and we can talk more.
cloudking
What is the UX for an end user with the OAuth? They use MCP say for GitHub in Cursor, how do they provide access to their GitHub?
Also why would they not just use the official GitHub MCP?
wirehack
Hi yes so if you just use it yourselves locally in Cursor, I think you can definitely just use the official GitHub MCP. But there might be more use cases where people want to connect MCP servers in their AI agents and deploy it in the cloud, then the local GitHub server would not be a fit.
The UX for end user OAuth is the standard GitHub Oauth flow. You will see a webpage saying that an GitHub Oauth App is requesting access to your github and you need to select yes/no.
orliesaurus
If it's open source, why do I need an API key to get started? What does the API key do?
wirehack
The API is for our hosted version. For open source, you can go to https://github.com/Klavis-AI/klavis and check the comprehensive readme. I think we have readme for every MCP server and client and how to set that up.
orliesaurus
Step one of you read me in the repo you just mentioned says: ```Sign up for Klavis platform and create your API key```
wirehack
Hi! Thank you for catching this! I have fixed it right away. This is valuable feedback and I really appreciate it. Now the quick start points to the list of readmes and the hosted version is in the second half of the readme with a clear section Hosted Solutions.
koakuma-chan
It’s a startup so there has to be some kind of monetisation right?
atonse
Does this mean that we'd have to store our various keys/credentials with you (in the hosted solution).
If so, I would emphasize or add more documentation on how you are securing credentials.
And how would I add this to my agent? Would you have One MCP To Rule Them All?
wirehack
Yes thank you for the good feedback. We will update our doc to reflect this.
> how would I add this to my agent? Would you have One MCP To Rule Them All?
If you are talking about the hosted version, you can go to our website to grab an API key and call the corresponding endpoint. https://docs.klavis.ai/documentation/mcp-server/github is the doc for GitHub MCP server.
in terms of one mcp to rule them all, it is something on our roadmap now. We are thinking that you can connect to all of the MCP servers we provide with a single URL and you can turn on/off the MCP servers in a simple UI or through API call. Let me know if this is what you have in mind.
atonse
Right now, as you know we’re in a total Wild West with this. So the experience is different for each client (VS code, cursor, etc)
To me, the ideal the UX is similar to the extensions UXs in each IDE, you search, click install, and get on with your life after doing an OAuth dance. Or even a discovery mechanism built into the agent itself. Sort of a “have you considered installing this? I can talk directly to JIRA for you” etc
The next best thing would be a catalog where I search, and with a single install button that would add the MCP to a certain IDE. But do the IDEs make this sort of API available, given that they all want to differentiate?
srameshc
I like from what I see and the option of self hosting. Does it have a middleware like feature to extend, say I want to add more apps than what is provided out of the box ?
wirehack
Hi, you are definitely more than welcome to create PRs in our repo to add more MCP servers.
null
null
null
Hi HN, we are excited to show you Klavis AI. It is an open source project and we provide hosted versions with API access as well. (Website: https://www.klavis.ai/, Github repo: https://github.com/Klavis-AI/klavis)
We're addressing a couple of key problems with using MCPs. First, many available MCP servers lack native or used-based authentications, creating security vulnerabilities and adding complexity during development.
Second, many MCP servers are personal projects, not designed for the reliability needed in production.
Connecting to these servers usually requires writing custom MCP client code for the MCP protocol itself, which is a barrier, especially if you already have function calling systems in place.
Klavis AI aims to address these issues. To simplify access, we offer an API to launch production-ready, hosted MCP servers quickly via our API. The API also provides built-in OAuth and multi-tenancy auth support for MCP servers.
We also want to remove the need for developers to write MCP client code. You can use our API to interact with any remote MCP servers directly from your existing backend infrastructure. For faster prototyping or direct user interaction, we also provide open-source client interfaces for Web, Slack, and Discord.
The MCP servers and clients code is open source because we want to contribute to the MCP community.
For a quick start in the hosted verions, log in to our website and generate an API key. Then start calling our APIs directly. You can find more details in our doc: https://docs.klavis.ai
For a quick start in the open source version, go to our github repository and check out the detailed readme on each MCP server and client.
A little note about myself: my background includes working on the function calling for Google Gemini. During that time, I saw firsthand the challenges teams face when trying to connect AI agents to external tools. I want to bring my insights and energy to accelerate MCP adoption.
This is an early release, and we’d appreciate feedback from the community. What are your worst pain points related to MCPs, either as a developer or a general user? What other MCP servers or features would be most valuable to you?
We'll be around in the comments. Thanks for reading!