agentmods.dev

mcp-runtime-platform-public

mcp-runtime-platform-public is a skill for Claude Code, Codex from Agent-Hellboy/mcp-runtime. It costs 77 tokens per session (956 once invoked), scanned A, original, Apache-2.0.

A setup and troubleshooting guide for making MCP Runtime available through public internet hostnames. MCP Runtime is software that runs MCP servers, and TLS encrypts connections using HTTPS.

In plain words
What is it for?
Use it to configure hostnames for the dashboard, registry, and MCP servers, set up Let's Encrypt certificates, and diagnose production ingress failures.
Why use it?
It helps resolve domain, DNS, certificate, registry-authentication, and platform-routing problems in public deployments.

Skill for Claude CodeCodex

not rated 5 9d ago A scan 77 tokens original Apache-2.0
View the source file Agent-Hellboy/mcp-runtime
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/agent-hellboy/mcp-runtime/mcp-runtime-platform-public
Any agent
npx skills add Agent-Hellboy/mcp-runtime --skill mcp-runtime-platform-public
Clone the repo
git clone --depth 1 https://github.com/Agent-Hellboy/mcp-runtime

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mcp-runtime-platform-public

README.md
[![agentmods](https://agentmods.dev/badge/skills/agent-hellboy/mcp-runtime/mcp-runtime-platform-public.svg)](https://agentmods.dev/skills/agent-hellboy/mcp-runtime/mcp-runtime-platform-public)
Your own site
<a href="https://agentmods.dev/skills/agent-hellboy/mcp-runtime/mcp-runtime-platform-public"><img src="https://agentmods.dev/badge/skills/agent-hellboy/mcp-runtime/mcp-runtime-platform-public.svg" alt="Measured on agentmods" height="20"></a>
Per session 77 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 956 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00077 $0.00956
Opus 5 $0.00039 $0.00478
Sonnet 5 $0.00015 $0.00191
Haiku 4.5 $0.00008 $0.00096

Measured 3d ago against content hash 0e419eade801, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

mcp-runtime-platform-public scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.codex/skills/mcp-runtime-platform-public/SKILL.md · 69 lines

How it starts

The opening of the file, as written. The whole thing — 69 lines — stays where its author put it; the contents beside it link to each section on GitHub.

MCP Runtime — public platform (domain, TLS, DNS)

Hostname model

With export MCP_PLATFORM_DOMAIN=example.com (apex only, no https://):

Role Host
Registry (push/pull ingress) registry.example.com
MCP servers (default host-based) mcp.example.com
Dashboard / API / Grafana path platform.example.com

Override individual hosts with MCP_REGISTRY_INGRESS_HOST, MCP_MCP_INGRESS_HOST, MCP_PLATFORM_INGRESS_HOST.

Operator may set MCP_DEFAULT_INGRESS_HOST=mcp.<domain> from platform domain env.

Expected URLs (after DNS + TLS)

  • Dashboard: https://platform.<domain>/ (API at /api/v1/* via Traefik). Grafana at /grafana via mcp-sentinel-platform-observability + sentinel-admin-auth@file (admin cookie or admin x-api-key). Prometheus stays internal — port-forward only for backend debug.
  • Registry: https://registry.<domain>/v2/ (admin auth via registry-admin-auth@file → /api/v1/registry/authz)
  • MCP server: https://mcp.<domain>/<server-name>/mcp (path-based; set spec.publicPathPrefix and MCP_PATH)

Default MCPServer ingress class: traefik.

TLS setup

./bin/mcp-runtime setup --with-tls --acme-email <addr>
# staging: --acme-staging or MCP_ACME_STAGING=1
# enterprise CA (no ACME): --with-tls --tls-cluster-issuer <name>  # mutually exclusive with --acme-email

DNS requirements

  • A/AAAA (or CNAME) for registry., mcp., and platform. → same ingress IP/LB
  • Port 80 → Traefik for HTTP-01 before certs issue
  • Typos (regsitry, platfrom) break matching certificates

Certificates

  • registry/registry-cert → registry/registry-tls (only supported owner for that Secret; registry Ingress must not use cert-manager.io/cluster-issuer on the Ingress itself)
  • Platform UI: mcp-sentinel-platform-tls in mcp-sentinel via mcp-sentinel-platform-ui Ingress
  • Bundled HTTPS may create cert-manager/mcp-runtime-ca; nodes must trust tls.crt for image pulls
  • Private CA without ACME: config/cert-manager/ and omit --acme-email

Read the full file on GitHub · 69 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 69 lines · 77 tokens per session scan A 0e419eade801

Subscribe to this mod's changes

mcp-runtime-platform-public is a skill published in the GitHub repository Agent-Hellboy/mcp-runtime (5 stars, last pushed 9d ago), licensed Apache-2.0. It adds 77 tokens to every session and 956 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

CloudDevOps and cloudmcpmcp-deploymentmcp-gatewaymcp-platformmcp-runtimemcp-tools
Related

Other skills, from other repositories

infra-sync

Keep Terraform and CDK infrastructure in sync. Compares terraform/aws-ecs/ and infra/ to identify discrepancies in ECS services, networking, storage, secrets, IAM, and configuration. Reports parity gaps and generates fixes for the target IaC tool. Use when changes are made to either Terraform or CDK infrastructure.

agentic-community/mcp-gateway-registry · 66 tokens

azure-iac-bicep

Author, refactor, validate, and deploy Azure infrastructure as code in Bicep (preferred) and ARM JSON. Use when creating or editing .bicep / .bicepparam files, designing modules, decompiling or migrating ARM templates to Bicep, wiring what-if and deployment-stack workflows, hardening IaC for security (managed…

timothywarner-org/context-engineering · 150 tokens

tencent-pg-inspection

Run routine health inspection for Tencent Cloud PostgreSQL by calling Tencent Cloud OpenAPI directly. This skill can use the full aligned PostgreSQL OpenAPI action set documented in @references/apireference.md. Start with evidence collection first, and require explicit confirmation before any write, fee-impacting, or…

TencentCloudCommunity/mcp-server · 68 tokens

tencent-pg-ops-troubleshooter

Troubleshoot operational issues for Tencent Cloud PostgreSQL by calling Tencent Cloud OpenAPI directly. This skill can use the full aligned PostgreSQL OpenAPI action set documented in @references/apireference.md. Start with evidence collection first, and require explicit confirmation before any write, fee-impacting…

TencentCloudCommunity/mcp-server · 72 tokens

cloudflare_ship_worker

Ship a Cloudflare Worker correctly — configure wrangler, set bindings and secrets, run a dry-run, deploy, and verify.

Tarekkharsa/agentstack · 31 tokens

cloudflare_wrangler_cheatsheet

Quick reference mapping Cloudflare product surfaces (Workers, Pages, KV, R2, D1, DNS) to the wrangler CLI commands teams use day to day.

Tarekkharsa/agentstack · 43 tokens