What is an MCP Gateway?
An MCP (Model Context Protocol) Gateway is a hosted endpoint that:- Exposes tools from attached capabilities (built-in, plugins, and connectors)
- Implements the MCP protocol for seamless client integration
- Provides SSE (Server-Sent Events) and HTTP transports
- Supports authentication via API keys or JWT tokens
- Manages request routing and tool execution
Creating an MCP Gateway
Configure Basic Settings
Fill in the form:
- Name - Unique identifier for your gateway (e.g., “Claude Desktop”)
- Description - Optional human-readable notes
- Enable Authentication - Require API key or JWT for access (recommended for production)
Attaching Capabilities
Capabilities define what tools your gateway exposes. You can attach:- Built-in Capabilities - Pre-configured services (Web Search, Code Runner, etc.)
- Plugins - Custom WebAssembly tools you’ve created
- Connectors - REST APIs, MCP registry services, or custom MCP servers
To Attach a Capability
- Open your gateway settings
- Click the Capabilities tab
- Click Attach Capability
- Choose capability type (Built-in, Plugin, or Connector)
- Select from available options
- Configure optional per-gateway settings
- Click Save
Some capabilities like Computer are Agent-only and cannot be attached to MCP gateways. These are restricted to agent execution.
Gateway Specifications
Gateway specifications control advanced behavior through a JSON configuration. Access these in Gateway Settings > Specifications.Key Specification Fields
| Field | Type | Description |
|---|---|---|
omni_tool | Object | Omni Tool configuration for unified tool discovery |
tool_visibility | String | How tools are presented to clients (Omni, Smart, Individual) |
max_requests_per_minute | Number | Rate limiting (optional) |
timeout_seconds | Number | Request timeout (default: 300) |
request_logging | Boolean | Log all requests for debugging |
Omni Tool Configuration
Omni Tool uses LLM-based analysis to automatically discover the right tool from your attached capabilities. Users make natural language requests instead of choosing specific tools.Visibility Modes
| Mode | Tools Exposed | Best For |
|---|---|---|
| Omni | Single omni_tool | Clean UX, maximum simplicity |
| Smart | 3 meta-tools (Discover, Execute, Learn) | Agentic exploration, progressive disclosure |
| Individual | All individual tools | Power users who know exact tools |
Configuration Example
Authentication
Requiring Authentication
By default, MCP gateways are public. To restrict access:- Open gateway settings
- Toggle Require Authentication
- Choose authentication method:
- API Key - Static key (easiest for development)
- JWT Token - Time-bound tokens (better for production)
- Both - Accept either method
Using API Keys
- In your gateway settings, click API Keys
- Click Generate API Key
- Store the key safely (shown only once)
- Pass in requests via
X-API-Key: ak-...header
Using JWT Tokens
- In your gateway settings, click JWT Configuration
- Configure issuer, audience, and public key
- Your MCP client will validate tokens using the public key
Gateway Endpoints
MCP Protocol Endpoint
- SSE Transport - Server-Sent Events (recommended for browsers)
- HTTP Transport - Standard HTTP requests with
/tools,/resources,/promptsendpoints
Status & Health
Best Practices
Development
- Use public gateways for early testing
- Enable request logging to debug issues
- Attach only capabilities you need
Production
- Enable authentication (API Key or JWT)
- Set reasonable rate limits
- Monitor request patterns in usage dashboard
- Use meaningful names for easy identification
- Document attached capabilities in the description
Security
- Rotate API keys regularly
- Use JWT tokens with short expiration times
- Audit attached capabilities for permissions
- Restrict sensitive connectors to trusted clients
- Monitor for unusual activity via request logs
Monitoring & Troubleshooting
Check Gateway Status
- Go to gateway settings
- View Status section
- See recent request metrics and error rates
Debug Issues
- Enable Request Logging in specifications
- Check logs in Activity tab
- Verify capabilities are properly attached
- Test endpoint directly with curl:
Common Issues
| Issue | Solution |
|---|---|
| ”Gateway not found” | Verify gateway ID in URL |
| ”Authentication failed” | Check API key or JWT token format |
| ”Tool not found” | Ensure capability is attached and enabled |
| ”Request timeout” | Increase timeout in specifications or reduce payload size |