MCP Gateway
mcp-gateway
A reverse proxy and lifecycle management for MCP servers on Kubernetes and Azure from Microsoft: routing, authorization, roles. For platform teams
- 875 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Deploys infrastructure and manages access
- Protocol version 2026-07-28 is needed
- For platform teams
Install
- Works in
Manual install
Read the README, find out the protocol version of the clients and deploy the gateway in a test cluster first. Agree on rights and roles with the owner.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Deploys infrastructure and manages access
- Protocol version 2026-07-28 is needed
- For platform teams
This is third-party code. Review the repository files before installing.
What it does
MCP Gateway from Microsoft stands in front of MCP servers and routes client requests to them. It manages server lifecycle on Kubernetes and Azure and checks access by Bearer tokens and RBAC roles. The README warns about a breaking change: clients and adapters of MCP version 2026-07-28 are needed and the old initialization is not supported. The repository has no releases. MIT license.
Who it is for. For platform and DevOps teams that deploy shared MCP servers for a company and want a single entry point and access control.
Good fit when
- You need a single entry point for several MCP servers in a company
- You need roles and authorization in front of MCP servers
- You need to manage MCP servers on Kubernetes
Not a fit when
- You need a gateway for a single developer: this is a platform solution
- You need compatibility with old MCP clients
Example request
Deploy the gateway in a test cluster, register one MCP server and allow access to one role onlyMCP
- Transport
- http
- Authentication
- OAuth
Limitations
The gateway deploys infrastructure and manages access, so access is wide: a settings error opens servers to the whole company. Clients and adapters of MCP version 2026-07-28 are needed with no compatibility with the old initialization. There are no releases and project versions are not fixed.
How to disable. Remove the gateway from the cluster with the same manifests you deployed it with and revoke issued tokens.
FAQ
What does MCP Gateway do?
It stands in front of MCP servers, routes requests and manages their lifecycle on Kubernetes and Azure.
What access protection is there?
Bearer tokens and RBAC roles.
What is the breaking change?
Clients and adapters of MCP version 2026-07-28 are needed and the old initialization is not supported.
Discussion
No questions or reviews yet.
Related
MCP serversAgentgateway
agentgateway
A proxy for agentic traffic: routes and secures connections to MCP servers, LLMs, and other agents over A2A
MCP Gateway Registry
mcp-gateway-registry
One registry and gateway for MCP servers, agents and skills: shared login, OAuth, audit, OpenTelemetry. Community project for Docker and cloud
A self-hosted gateway that merges several MCP servers into one endpoint with auth and tool selection
A proxy between MCP transports: connects stdio clients to remote SSE and HTTP servers and exposes local servers over the network
A CLI and Kubernetes controller for developing, building and deploying MCP servers. For platform teams, written in Go
An IBM gateway and registry that federates MCP servers, A2A agents and REST or gRPC APIs behind one endpoint with auth and observability
Comparison with similar tools
Entries that share the main search query, and how they differ.
| Entry | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| MCP Gateway (this entry) | yes | OAuth | 875 | |
| MCP Gateway Registry | no | OAuth | 972 | a registry and gateway for servers, agents and skills with OAuth and audit |
| 1MCP Agent | no | not required | 516 | one address for many MCP servers, a beta version |
| hyper-mcp | no | not required | 882 | an MCP server in Rust with WebAssembly plugins |
README in short
The README describes a reverse proxy and lifecycle management of MCP servers on Kubernetes and Azure with Bearer and RBAC authorization. MIT license.