loglux/authmcp-gateway

**Secure authentication proxy for Model Context Protocol (MCP) servers**
AuthMCP Gateway is a **full MCP protocol proxy** with centralized authentication, authorization, and monitoring. It transparently proxies all MCP capabilities — tools, resources, prompts, and completions — from multiple backend servers through a single authenticated endpoint.
**OAuth + DCR ready:** the gateway supports OAuth 2.0 Authorization Code flow with Dynamic Client Registration (DCR), so MCP clients like Codex can self-register and authenticate without manual client provisioning.
📋 Table of Contents
- ✨ Features
- 📸 Screenshots
- 🚀 Quick Start
- ⚙️ Configuration
- 💡 Usage
- 🏗️ Architecture
- 🔌 API Endpoints
- 🔐 Security
- 🛠️ Development
- 📊 Monitoring
- 🔧 Troubleshooting
---
✨ Features
🔗 **Full MCP Protocol Proxy** (v1.2.0)
- **Tools** - tools/list, tools/call with intelligent routing (prefix, mapping, auto-discovery)
- **Resources** - resources/list, resources/read, resources/templates/list
- **Prompts** - prompts/list, prompts/get
- **Completions** - completion/complete with ref-based routing
- **Dynamic Capabilities** - queries backends on initialize and advertises only what they support
- **Multi-server aggregation** - list methods merge results from all backends; read/get/call routes to the correct one
- **Protocol version** - MCP 2025-03-26
🔐 **Authentication & Authorization**
- **OAuth 2.0 + JWT** - Industry-standard authentication flow
- **Dynamic Client Registration (DCR)** - MCP clients can self-register for OAuth
- **User Management** - Multi-user support with role-based access
- **Backend Token Management** - Secure storage and auto-refresh of MCP server credentials
- **Rate Limiting** - Per-user request throttling with configurable limits
📊 **Real-Time Monitoring**
- **Live MCP Activity Monitor** - Real-time request feed with auto-refresh
- **Performance Metrics** - Response times, success rates, requests/minute
- **Security Event Logging** - Unauthorized access attempts, rate limiting, suspicious activity
- **Health Checking** - Automatic health checks for all connected MCP servers
🎛️ **Admin Dashboard**
- **User Management** - Create, edit, and manage users
- **MCP Server Configuration** - Add and configure backend MCP servers
- **Token Management** - Monitor token health and manual refresh
- **Security Events** - View and filter security events
- **Security Audit** - MCP vulnerability scanning
🛡️ **Security**
- JWT token-based authentication with refresh tokens
- Secure credential storage with encrypted database support
- CORS protection and request validation
- Security event logging and monitoring
- **File-based logging** - JSON logs for auth & MCP requests with rotation; security events remain in SQLite for audit/queries
📸 Screenshots
🖥️ Dashboard - Real-time Overview
*Live statistics, server health monitoring, top tools usage, and recent activity feed*
🔧 MCP Servers - Connection Management
*Manage backend MCP server connections with status monitoring and health checks*
📊 MCP Activity Monitor - Real-time Request Tracking
*Monitor live MCP requests with detailed metrics, top tools ranking, and request feed*
🛡️ Security Events - Threat Detection
*Track security events, rate limiting, suspicious payloads, and unauthorized access attempts*
🔒 MCP Security Audit - Vulnerability Scanner
*Test any MCP server for security vulnerabilities with comprehensive automated checks*
---
🚀 Quick Start
Option 1: PyPI Package (Recommended)
**1. Install:**
**2. First Run:**
**3. Access Setup Wizard:**
Open **http://localhost:8000/** in your browser to create admin user.
**4. Optional - Customize Configuration:**
**Available Commands:**
Option 2: Docker Compose
1. **Clone and configure:**
2. **Start the gateway:**
3. **Access admin panel:**