+ Getting started
+
+ Junctio is one container and one volume. The image is {SITE.image}, built for amd64 and arm64.
+ latest is the last release, edge follows main.
+
+
+ Run it
+ Fetch the compose file and the environment template:
+ mkdir junctio && cd junctio
+curl -fsSLO {SITE.composeUrl}
+curl -fsSL {SITE.envUrl} -o .env
+
+ Set JUNCTIO_SECRET in .env to the output of openssl rand -hex 32. The process refuses
+ to start without it, because it is the key that encrypts every stored token. Then:
+
+
+
+ Open http://localhost:3000 and set an admin password. Running from the source tree works too, with
+ bun install, bun run build:web and bun run start.
+
+
+ Connect a client
+
+ -
+ Add a server. For a package on npm pick the
npx runtime and type the package name. The form previews
+ the exact command.
+
+ - Create a namespace and put the server in it.
+ - Create an endpoint pointing at that namespace and issue an API key.
+ - Paste the snippet into your client.
+
+ claude mcp add --transport http junctio https://mcp.example.com/mcp/main \
+ --header "Authorization: Bearer jn_..."
+
+ Every client sees the same endpoint. Tools from each upstream are exposed with a prefix, so github__search
+ and db__query live side by side without colliding. Endpoints covers
+ aggregation, auth modes and protocol negotiation.
+
+
+ Behind a domain
+
+ Set JUNCTIO_BASE_URL and JUNCTIO_TRUST_PROXY=true, and terminate TLS in front of the
+ gateway. OAuth does not work over plain HTTP: browsers and MCP clients refuse the redirects. The
+ Caddy guide is a two-line Caddyfile; Dokploy,
+ Coolify and Portainer have their own
+ pages.
+
+
+ Where to go next
+
+ - Upstream servers: stdio runtimes, remote transports, images, upstream OAuth.
+ - Management MCP: let an agent configure the gateway instead of clicking.
+ - Explore: the registry, other catalogs, import from a pasted client config.
+ - Security audit: scheduled vulnerability checks and what a finding does.
+ - Use cases: Claude Code, Cursor, claude.ai connectors, a small team, a VPS.
+
+
diff --git a/apps/site/src/pages/index.astro b/apps/site/src/pages/index.astro
new file mode 100644
index 0000000..8ae1b23
--- /dev/null
+++ b/apps/site/src/pages/index.astro
@@ -0,0 +1,208 @@
+---
+import Base from "@/layouts/Base.astro";
+import CopyCommand from "@/components/CopyCommand.vue";
+import GatewayFlow from "@/components/GatewayFlow.vue";
+import TokenTimeline from "@/components/TokenTimeline.vue";
+import { SITE } from "@/lib/site";
+import { ArrowRight, Box, EyeOff, KeyRound, Layers, RefreshCw, ShieldCheck, Terminal } from "@lucide/vue";
+import { getCollection } from "astro:content";
+
+const useCases = (await getCollection("useCases")).sort((a, b) => a.data.order - b.data.order);
+
+const features = [
+ {
+ icon: RefreshCw,
+ title: "Proactive token refresh",
+ text: "Upstream OAuth tokens are renewed on a schedule, not after a request has already failed. Refresh tokens rotate on every use."
+ },
+ {
+ icon: EyeOff,
+ title: "No telemetry",
+ text: "No phone-home, no analytics, no update ping. The only outbound call the UI makes is to the public MCP registry, while you look at it."
+ },
+ {
+ icon: Layers,
+ title: "One endpoint, many servers",
+ text: "Tools from every upstream are aggregated under prefixes. A dead upstream does not take the rest down."
+ },
+ {
+ icon: KeyRound,
+ title: "Its own authorization server",
+ text: "PKCE, dynamic client registration and a consent screen behind the admin password. What claude.ai and Claude Desktop connectors need."
+ },
+ {
+ icon: Terminal,
+ title: "Management MCP",
+ text: "Forty-six tools over the same REST API the UI uses, so an agent can configure the gateway instead of you clicking through it."
+ },
+ {
+ icon: ShieldCheck,
+ title: "Security audit",
+ text: "Optional scheduled vulnerability checks for every stdio server, with a per-severity action you choose."
+ }
+];
+
+const steps = [
+ { title: "Add a server", text: "Pick a runtime, type the package name, the form previews the exact command." },
+ { title: "Group it in a namespace", text: "Choose a prefix per server, hide or rename tools, add instructions." },
+ { title: "Create an endpoint", text: "API key, OAuth, both or none. Issue a key or let a client register itself." },
+ { title: "Paste one snippet", text: "Every client points at the same URL. Change upstreams without touching clients." }
+];
+
+const jsonLd = {
+ "@context": "https://schema.org",
+ "@type": "SoftwareApplication",
+ name: SITE.name,
+ applicationCategory: "DeveloperApplication",
+ operatingSystem: "Linux, Docker",
+ description: SITE.description,
+ url: Astro.site?.toString(),
+ license: "https://opensource.org/licenses/MIT",
+ codeRepository: SITE.repo,
+ offers: { "@type": "Offer", price: "0", priceCurrency: "USD" }
+};
+---
+
+
+ Runs wherever Docker does
+
+ A multi-arch image on GHCR, a compose file, and guides for Caddy, Dokploy, Coolify and Portainer. Read
+ the security notes before exposing it to anyone but yourself.
+
+
+
+
diff --git a/apps/site/src/pages/robots.txt.ts b/apps/site/src/pages/robots.txt.ts
new file mode 100644
index 0000000..b81de27
--- /dev/null
+++ b/apps/site/src/pages/robots.txt.ts
@@ -0,0 +1,6 @@
+import type { APIRoute } from "astro";
+
+export const GET: APIRoute = ({ site }) => {
+ const body = ["User-agent: *", "Allow: /", "", `Sitemap: ${new URL("/sitemap-index.xml", site)}`, ""].join("\n");
+ return new Response(body, { headers: { "Content-Type": "text/plain; charset=utf-8" } });
+};
diff --git a/apps/site/src/pages/use-cases/[slug].astro b/apps/site/src/pages/use-cases/[slug].astro
new file mode 100644
index 0000000..bca0260
--- /dev/null
+++ b/apps/site/src/pages/use-cases/[slug].astro
@@ -0,0 +1,24 @@
+---
+import DocsLayout from "@/components/DocsLayout.astro";
+import { SITE } from "@/lib/site";
+import { getCollection, render } from "astro:content";
+
+export async function getStaticPaths() {
+ const entries = await getCollection("useCases");
+ return entries.map((entry) => ({ params: { slug: entry.id }, props: { entry } }));
+}
+
+const { entry } = Astro.props;
+const { Content, headings } = await render(entry);
+---
+
+
+ 
+ {SITE.name}
+
+
+