MCP Gateway — Stratum Labs

Kimai Time Tracking

Timesheet management, project tracking, customer billing via Kimai API

Checking

MCP Endpoint /s/<secret>/mcp

Transport Streamable HTTP (stateless)

Internal Port 3100

Backend Kimai 2.48 → localhost:8001

Timesheets Projects Activities Customers

Twenty CRM

CRM operations — contacts, companies, deals, tasks via Twenty GraphQL API

Checking

MCP Endpoint /s/<secret>/twenty/mcp

Transport Streamable HTTP (session)

Internal Port 3002

Backend Twenty CRM → localhost:3000

People Companies Opportunities Tasks Activities Notes Metadata Relationships

Secret URL Authentication Enforced

MCP endpoints require a secret path token in the URL
Direct access to /mcp and /twenty/mcp returns 401
All traffic encrypted via TLS 1.3 (Let's Encrypt)
Backend APIs accessed only via localhost (not exposed externally)
Health endpoints remain public for monitoring
Compatible with Claude.ai, Claude Desktop, and Claude Code
Secret URLs stored at /opt/mcp-gateway/.env on VPS

Claude.ai / Claude Desktop / Claude Code
        |
        | HTTPS (TLS 1.3)
        v
   Nginx (mcp.stratumlabs.com.au)
        |
   [Secret URL Validation]
        |
   +----|-----------------------------+
   |    |                             |
   | /s/<secret>/mcp      /s/<secret>/twenty/*
   |    |                             |
   v    v                             v
 Kimai MCP                      Twenty MCP
 :3100                          :3002
   |                              |
   v                              v
 Kimai API                    Twenty CRM
 :8001 (Docker)               :3000 (Docker)