webrix-ai/secure-mcp-gateway

A secure, open-source OAuth gateway for MCP authentication
Gateway + integration layer for the Model Context Protocol (MCP)
---
MCP-S Gateway
**mcp-gateway** is a secure gateway and integration layer for the **Model Context Protocol (MCP)**. It provides a unified, enterprise-ready interface for connecting, managing, and extending MCP modules and services, with a focus on security and seamless integration.
Quick Start
**1. Configure your MCP servers** - Create mcp.json file in your project:
**2. Use the .env.example file as a base, and override as needed:**
**3. Start with npx (Recommended):**
Or clone:
**4. Add to your MCP configuration**:
stdio:
Streamable HTTP Configuration:
Features
- **Self-Hosted Gateway**: Deploy within your own infrastructure for maximum control
- **OAuth Authentication**: Secure authentication with any OAuth provider via Auth.js
- **TypeScript Support**: Fully typed for robust development
TODO: ADD OUR VIDEO -->
**Supports all MCP Connection Types:**
- **STDIO**: Standard input/output MCP servers
- **StreamableHTTP**: HTTP-based streaming connections via http://localhost:3000/mcp (or https:// /mcp for hosted deployments)
> **Server Selection**: You can connect to a specific MCP server by adding the ?server_name=XXX query parameter, where XXX is the name of the server from your mcp.json configuration. For example: http://localhost:3000/mcp?server_name=your-server
**Connect with your preferred AI client:**
| Client | Link |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------- |
| **Claude** | claude.ai |
| **Cursor** | cursor.com |
| **Windsurf** | codeium.com/windsurf |
| **VSCode** | code.visualstudio.com |
| **Cline** | cline.tools |
| **Highlight AI** | highlightai.com |
| **Augment Code** | augmentcode.com |
Deploy
Deploy the mcp-s gateway using npx:
1. Set up your environment variables (see Advanced Configuration)
2. Create your mcp.json configuration file
3. Run npx @mcp-s/secure-mcp-gateway
For production deployments, consider using:
- Process managers like PM2: pm2 start "npx @mcp-s/secure-mcp-gateway" --name mcp-gateway
- Container orchestration (Docker, Kubernetes)
- Cloud platforms (Heroku, Railway, Render)
Authentication Setup
mcp-gateway leverages the power of Auth.js, which supports **80+ OAuth providers** out of the box. This makes Auth.js the perfect companion for an open-source project like mcp-gateway. Both libraries share the same commitment to flexibility, security, and developer experience. By integrating with Auth.js, we avoid reinventing authentication wheels and instead provide you with battle-tested, production-ready OAuth flows that work seamlessly across providers.
Simply set the AUTH_PROVIDER environment variable and provide the required credentials for your chosen provider - mcp-gateway handles the rest.
Google OAuth Setup
**Documentation**: Auth.js Google Provider
Okta OAuth Setup
**Documentation**: Auth.js Okta Provider
Azure AD OAuth Setup
**Documentation**: Auth.js Azure AD Provider
GitHub OAuth Setup
**Documentation**: Auth.js GitHub Provider
GitHub OAuth is particularly useful for MCP servers that interact with GitHub repositories, such as Octocode. When using GitHub OAuth, you can specify scopes to control what permissions your MCP servers have access to.