VolkanSah/Multi-LLM-API-Gateway
— or Universal MCP Hub (Sandboxed) — or secure AI wrapper with dual interface: REST + MCP aka: a clean, secure starting point for your own projects. Pick the description that fits your use case. They're all correct.
What's novel
— or Universal MCP Hub (Sandboxed) — or secure AI wrapper with dual interface: REST + MCP aka: a clean, secure starting point for your own projects. Pick the description that fits your use case. They're all correct.
Code Analysis
10 files read · 3 roundsA multi-LLM API gateway exposing both REST and MCP interfaces for calling various LLM providers (Anthropic, Gemini, OpenRouter, HuggingFace) with a fallback chain, built on a Guardian-pattern security architecture that isolates secrets from application code.
Strengths
Well-structured architecture with clear separation between Guardian (secrets) and app (logic), thoughtful graceful degradation (no key = no tool = no crash), and a genuinely novel self-healing debugger that uses LLMs to auto-repair code in a subprocess loop. The code is extensively documented with architecture notes, security considerations, and usage examples.
Weaknesses
No test files exist anywhere in the project, the healer module has a critical bug (asyncio.get_event_loop().run_until_complete() inside asyncio.to_thread will fail), and the REST /api endpoint exposes a raw SQL injection vector via the db_query tool. The project is explicitly marked 'NOT FULL READY' with several TODO/unimplemented features.
Score Breakdown
Signal breakdown
Innovation
Craft
Traction
Scope
Evidence
Commits
235
Contributors
1
Files
61
Active weeks
3
Repository
Language
Python
Stars
1
Forks
1
License
Apache-2.0