mathom

mathom is a local-first platform to run and monitor MCP (Model Context Protocol) servers, providing a local dashboard, live logs/metrics/status, and OAuth2-based authentication so MCP clients can access servers securely.

Evaluated Mar 30, 2026 (22d ago)

Repo ↗ DevTools mcp oauth2 local-first dashboard monitoring cli proxy docker

⚙ Agent Friendliness

/ 100

Can an agent use this?

🔒 Security

/ 100

Is it safe for agents?

⚡ Reliability

/ 100

Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality

Documentation

Error Messages

Auth Simplicity

Rate Limits

🔒 Security

TLS Enforcement

Auth Strength

Scope Granularity

Dep. Hygiene

Secret Handling

Security is described at a high level via OAuth2. The README does not specify TLS requirements, token lifetimes, refresh behavior, PKCE, or scope granularity. Example docker usage passes PATs via env/flags, which increases the risk of leaking secrets via shell history/process logs unless carefully handled. Presence of a DATABASE_URL suggests persisted state that may require secure configuration (permissions, encryption at rest), but details are not provided.

⚡ Reliability

Uptime/SLA

Version Stability

Breaking Changes

Error Recovery

Best When

You want to run MCP servers on your machine (or self-hosted) with OAuth2 authentication and want operational visibility through a UI.

Avoid When

You need a clearly specified public API contract (OpenAPI/SDK/webhooks) for automation, or you cannot or do not want to manage local services (database/log endpoints) and container setup.

Use Cases

• Running MCP servers locally with centralized authentication
• Monitoring MCP server health and troubleshooting via a dashboard
• Launching standard MCP servers via a simple CLI (mcx)
• Wrapping STDIO MCP servers inside Docker with a proxy layer

Not For

• A managed hosted MCP platform where you cannot run infrastructure
• A fully documented public REST/SDK surface intended for third-party programmatic integration
• Use cases requiring explicit, fine-grained authorization beyond the documented OAuth2 approach

Interface

REST API

GraphQL

gRPC

MCP Server

SDK

Webhooks

Authentication

Methods: OAuth2 (as described for MCP clients that support OAuth2)

OAuth: Yes Scopes: No

README states 'Built-in OAuth2' and provides BETTER_AUTH_URL configuration, but does not document token endpoint, redirect flows, or any scope model.

Pricing

Free tier: No

Requires CC: No

Self-hosted open-source; no commercial pricing information provided in the README.

Agent Metadata

Pagination

none

Idempotent

False

Retry Guidance

Not documented

Known Gotchas

⚠ README focuses on CLI usage and UI; it does not document programmatic API endpoints, response schemas, or error formats for agent automation.
⚠ Configuration references multiple required URLs (BETTER_AUTH_URL, LOG_URL, DATABASE_URL), so local setup is non-trivial for automated agents.

Alternatives

@modelcontextprotocol/inspector Running MCP servers directly (without a supervising platform) Other MCP gateways/proxies that provide auth and routing (if available in your ecosystem)

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for mathom.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

API endpoint ↗ Agent guide ↗ Report inaccuracy

Scores are editorial opinions as of 2026-03-30.