# Portail > Unified proxy/gateway: AI Gateway + MCP Gateway + CDN cache + Agent-to-Agent protocol. Built in Rust with zero-copy I/O, SIMD-optimized hashing, and a live TUI dashboard. - **Type:** MCP server - **Install:** `agentstack add mcp-peterlodri-sec-portail` - **Verified:** Pending review - **Seller:** [peterlodri-sec](https://agentstack.voostack.com/s/peterlodri-sec) - **Installs:** 0 - **Category:** [Data & Analytics](https://agentstack.voostack.com/c/data-and-analytics) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [peterlodri-sec](https://github.com/peterlodri-sec) - **Source:** https://github.com/peterlodri-sec/portail - **Website:** https://portail.vaked.dev ## Install ```sh agentstack add mcp-peterlodri-sec-portail ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # Portail **Unified proxy/gateway: AI Gateway + MCP Gateway + CDN cache + Agent protocol + DNS + Observability** Blog · GitHub · X/Twitter · Patreon · Chat > **v2.0.0** · 201 tests · 0 warnings · 7 CI agents · MIT-licensed since 2026. > Read the philosophy: [`PHILOSOPHY.md`](PHILOSOPHY.md) Portail is a high-performance, self-hosted proxy and gateway giving you a single control plane for AI infrastructure. Built in Rust. Start in 5 minutes. Scale to fleet. **One binary.** Proxy, cache, hooks, agents, DNS, observability, loop engine. Everything. ## Features - **AI Gateway** — Stream proxy to LiteLLM, OpenAI, Anthropic, Ollama - **MCP Gateway** — Unix socket sidecar for MCP tool execution - **CDN Cache** — Two-tier (Moka in-memory + blake3 disk) with mmap zero-copy reads - **A2A Protocol** — Google Agent-to-Agent: agent cards, task lifecycle, WebSocket streaming - **A2C Chat** — Human-facing chat API with tool use, streaming, tokens - **Hook Injection** — Per-message/per-event prompt injection, CRUD API - **Event System** — Ring buffer + broadcast + SSE + NATS bridge for distributed events - **DNS** — DoH resolution, network isolation, TTL cache, fallback chain - **Observability** — OTLP traces (gRPC), Prometheus metrics, /dashboard health snapshot - **Security** — Rate limiting (token bucket, per-key/per-endpoint), JWT/API-key auth, HSTS - **Self-healing** — Config file watcher, auto-reload, validation, version history + rollback - **TUI Dashboard** — Live sparklines, cache ratios, config health, keyboard navigation - **Event Store** — SQLite (WAL, retention) with pluggable Turso/libSQL backend - **6 CI Agents** — Advisory-only: complexity, drift-detect, spec-verify, fuzz-route, chore-bot, clippy - **Type Hardened** — BoundedMeta (max 16 entries, key≤128B, val≤512B) replaces FxHashMap on hot paths - **Loop Engine** — 5 building blocks (Schedule, Worktree, Skill, Plugin, Sub-agent) + Memory/State + plan→execute→evaluate→decide pipeline - **Circuit Breaker** — Auto-stop after N consecutive failures, manual reset - **Council Decisions** — Ship / Iterate / Escalate with token budget enforcement - **Config Wizard** — `portail init` interactive generator, zero-config startup - **GraphQL API** — Async-graphql schema, query events + publish mutations - **Keyboards CLI** — Status, events, hooks, cache, health, config — all HTTP-connected to running server ## Quick Start ```bash # Install cargo install portail # Generate config (optional — works without it) portail init # Start server (zero config) portail serve # Interactive dashboard portail # Check health portail health curl http://localhost:8787/dashboard | jq ``` ## Installation | Method | Command | |--------|---------| | Cargo | `cargo install portail` | | Nix | `nix profile install github:peterlodri-sec/portail` | | Docker | `docker run -p 8787:8787 ghcr.io/peterlodri-sec/portail:latest` | | Quick script | `curl -fsSL https://raw.githubusercontent.com/peterlodri-sec/portail/main/scripts/install.sh \| bash` | | From source | `git clone && cargo build --release` | ## API Endpoints | Endpoint | Method | Description | |----------|--------|-------------| | `/healthz` | GET | Health check | | `/readyz` | GET | Readiness (dependencies) | | `/dashboard` | GET | Health snapshot: config, rate, auth, CDN | | `/metrics` | GET | Prometheus metrics | | `/v1/chat/completions` | POST | OpenAI-compatible chat | | `/v1/messages` | POST | Anthropic-compatible messages | | `/.well-known/agent.json` | GET | A2A agent card | | `/a2a/tasks` | POST | Create A2A task | | `/a2a/tasks/{id}` | GET | Get A2A task | | `/a2a/ws` | WebSocket | A2A real-time streaming | | `/a2c/chat` | POST | Agent-to-Consumer chat | | `/events` | GET/POST | Recent events / publish | | `/events/stream` | GET | SSE event stream | | `/hooks` | GET/POST | List / create hooks | | `/hooks/{id}` | DELETE | Delete hook | | `/graphql` | POST/GET | GraphQL API | | `/sessions` | GET | Session list | | `/sessions/{id}` | GET | Session detail | | `/supervisor/status` | GET | Background task status | | `/file-cache/{key}` | PUT/GET/DELETE | Content-addressable file cache | | `/file-cache/stats` | GET | File cache stats | | `/cdn/{*path}` | * | CDN cache proxy | | `/mcp/{*path}` | * | MCP sidecar proxy | ## CLI ``` portail # Interactive TUI dashboard portail serve # Start server (zero config) portail init # Interactive config wizard portail status # Version, config, server check portail events # Recent events (from running server) portail hooks list # List hooks portail hooks add # Add hook via JSON portail health # Health check portail config show # Show config (TOML) portail config validate # Validate config file portail config rollback # Rollback to previous version portail complexity # Big-O complexity analysis portail docs # Generate docs, open in browser portail learn # Learn networking concepts portail setup # Domain + TLS certificate setup portail loop run # Run loop iterations portail loop prompt # Generate _next-prompt.md for handoff portail loop council # Manual council override portail loop config # Show loop engine configuration portail loop schedules # List registered schedules ``` ## Hardware Optimizations - **mimalloc** — Global allocator, 2-3x alloc throughput - **blake3** — Native SIMD (SSE2/AVX2/NEON) for cache keys - **AHash** — DoS-resistant HashMap with per-process random seed - **UPX** — Compressed release binary ( **Explore**: [`AGENTS.md`](AGENTS.md) — codebase cross-reference hub. > **Philosophy**: [`PHILOSOPHY.md`](PHILOSOPHY.md) — project values and principles. > **Product**: [`docs/architecture/PRODUCT.md`](docs/architecture/PRODUCT.md) — strategy + positioning. > **Architecture**: [`docs/architecture/DESIGN.md`](docs/architecture/DESIGN.md) + [`NETWORK_DESIGN.md`](docs/architecture/NETWORK_DESIGN.md). > **Roadmap**: [`LOOP_STATE.md`](LOOP_STATE.md) — current state + next milestones. > **Loop Engine**: [`crates/loopeng/src/lib.rs`](crates/loopeng/src/lib.rs) — 5 building blocks + 4-phase pipeline + circuit breaker. > **Contribute**: [`docs/contributors/CONTRIBUTING.md`](docs/contributors/CONTRIBUTING.md). ## License MIT ## Source & license This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [peterlodri-sec](https://github.com/peterlodri-sec) - **Source:** [peterlodri-sec/portail](https://github.com/peterlodri-sec/portail) - **License:** MIT - **Homepage:** https://portail.vaked.dev Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** yes - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: flagged — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/mcp-peterlodri-sec-portail - Seller: https://agentstack.voostack.com/s/peterlodri-sec - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.