Memory
Individual Mnemosyne bank for every Forgejo identity.
Checking
Private agent infrastructure
One gateway.
Every capability.
Connect agents to tenant-isolated memory, private search, safe browser automation, live documentation, semantic code intelligence and Forgejo — without exposing your infrastructure.
Per-user memoryOAuth + PKCEServer policy enforcementAudited calls
Operational catalog
Capabilities, not configuration sprawl.
One bearer token and one compact tool bridge. Discover exact schemas on demand instead of loading every integration into context.
Private search
Self-hosted metasearch through SearXNG.
Checking
Browser
Network-isolated Playwright automation with SSRF controls.
Checking
Current docs
Version-aware library documentation through Context7.
Checking
Code intelligence
Semantic navigation and targeted edits with Serena.
Checking
Repository context
Approved remote repository packing with Repomix.
Checking
Forgejo
Repositories, issues and pull requests under user OAuth.
Checking
Control plane
Policies, approvals, async jobs and privacy-safe audit.
Checking
Media
Safe template-bound Remotion renders and temporary files.
Checking
CI control
Scoped Forgejo Actions status, dispatch and cancellation.
Checking
Notifications
Signed webhooks and ntfy lifecycle events.
Checking
Hub guidance
Live client configuration, skills and service guidance.
Checking
Security model
Useful access. Hard boundaries.
OAuth identity follows every request. The gateway enforces tenant ownership, scope, policy, confirmation and outbound network controls before a tool executes.
Authenticate
Forgejo OAuth with PKCE creates a short-lived account token. Every token maps to one identity and one memory bank.
Authorize
Server policy evaluates tool risk, scopes and target metadata. Destructive operations bind approvals to exact arguments.
Observe
Calls emit privacy-safe audit metadata. Layered monitors verify gateway, response, dependency and authenticated behavior.
Quick connect
Four tools.
Live schemas.
Download a verified bundle, choose initial MCP connections, then let the agent discover only the service and schema it needs.
# Linux / macOS
curl -fsSL https://git.barem.atractio.lol/rethinger/atractio-tool/raw/branch/main/install.sh | sh
# Windows PowerShell
irm https://git.barem.atractio.lol/rethinger/atractio-tool/raw/branch/main/install.ps1 | iex
# Store the token and choose compact or direct MCP
atractio-tool setup