MCP Server Gateway
A self-hosted gateway routes internal MCP tools, authenticates users and records requests for later review.
- 587 ★ on the repository
- Last commit
Broad access
Why this level
- Connected servers use GitHub, Drive and Artifactory account grants; broad grants expose their data and operations to the agent.
Install
- Works in
Manual install
docker compose up -d --buildStarts the stack from mcp-gateway after cloning and `./scripts/setup-local-env.sh`; this is the first Docker launch in Quick start.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Connected servers use GitHub, Drive and Artifactory account grants; broad grants expose their data and operations to the agent.
This is third-party code. Review the repository files before installing.
What it does
MCP Server Gateway provides a self-hosted stack for connecting agents to internal services. It routes requests to separate MCP servers and logs operations. The repository includes backends for Artifactory, GitHub and Google Drive. Teams adapt OAuth sign-in to their infrastructure. A reference LangGraph agent also demonstrates persistent history and sensitive-data processing before model requests.
Who it is for. Internal AI platform administrators who need one connection point, account-based access and request logs.
Good fit when
- Several internal services need agent access inside a restricted network.
- A team needs to identify the user behind each tool request.
- You want a working MCP routing stack before building a custom integration.
- You investigate a failure by matching tool requests against gateway logs.
Not a fit when
- You need a hosted service with no operational maintenance.
- The gateway must not access the selected work accounts.
- A direct connection to one local MCP server is enough.
Example request
Start a test MCP Server Gateway and verify Artifactory routing without connecting production accounts.MCP
- Transport
- http
- Authentication
- OAuth
Limitations
A running Docker installation and Compose v2 are required; prepare the environment with the project setup script first. The gateway exits at startup without `TOKEN_ENCRYPTION_KEY`, so set it before launching. The initial open-mode test does not expose GitHub tools; those need a separate OAuth application and configuration. This is a reference stack with changing APIs; verify account permissions, routes and logged data using test records before production access.
How to disable. Remove the gateway from the MCP client and stop its Docker stack. Revoke connected-service OAuth grants and manage stored logs and history separately.
FAQ
What should appear after startup?
`docker compose ps` should show five healthy containers. Connection tests can fail while the gateway is still starting.
How do I check the first route?
Run `./scripts/smoke-test.sh` from the gateway directory and look for `smoke-test: passed`.
Why does the gateway exit immediately?
Check the environment file and encryption key. `./scripts/setup-local-env.sh` prepares local configuration.
Must I run the example agent?
No. Its separate interface runs on port 8501 and is started after the gateway.
Do Docker images require local Node.js?
No. Node.js 20 or later is only needed for smoke-test scripts, not for building the images.
Discussion
No questions or reviews yet.
Related
MCP serversMCP Gateway Registry
mcp-gateway-registry
One registry and gateway for MCP servers, agents and skills: shared login, OAuth, audit, OpenTelemetry. Community project for Docker and cloud
An IBM gateway and registry that federates MCP servers, A2A agents and REST or gRPC APIs behind one endpoint with auth and observability
A self-hosted gateway that merges several MCP servers into one endpoint with auth and tool selection
Agentgateway
agentgateway
A proxy for agentic traffic: routes and secures connections to MCP servers, LLMs, and other agents over A2A
MCP Gateway
mcp-gateway
A reverse proxy and lifecycle management for MCP servers on Kubernetes and Azure from Microsoft: routing, authorization, roles. For platform teams
The docker mcp CLI plugin and gateway: MCP servers from Docker's catalog in isolated containers behind one connection point
README in short
The stack includes token-use and latency measurement. Documentation covers trusted TLS certificates for restricted corporate networks.