Secure authentication proxy for Model Context Protocol (MCP) servers
AuthMCP Gateway
Secure authentication proxy for Model Context Protocol (MCP) servers
AuthMCP Gateway is a full MCP protocol proxy with centralized authentication, authorization, and monitoring. It transparently proxies all MCP capabilities — tools, resources, prompts, and completions — from multiple backend servers through a single authenticated endpoint.
OAuth + DCR ready: the gateway supports OAuth 2.0 Authorization Code flow with Dynamic Client Registration (DCR), so MCP clients like Codex can self-register and authenticate without manual client provisioning.
📋 Table of Contents
- ✨ Features
- 📸 Screenshots
- 🚀 Quick Start
- ⚙️ Configuration
- 💡 Usage
- 🏗️ Architecture
- 🔌 API Endpoints
- 🔐 Security
- 🛠️ Development
- 📊 Monitoring
- 🔧 Troubleshooting
✨ Features
🔗 **Full MCP Protocol Proxy** (v1.2.0)
- Tools -
tools/list,tools/callwith intelligent routing (prefix, mapping, auto-discovery) - Resources -
resources/list,resources/read,resources/templates/list - Prompts -
prompts/list,prompts/get - Completions -
completion/completewith ref-based routing - Dynamic Capabilities - queries backends on
initializeand advertises only what they support - Multi-server aggregation - list methods merge results from all backends; read/get/call routes to the correct one
- Protocol version - MCP 2025-03-26
🔐 **Authentication & Authorization**
- OAuth 2.0 + JWT - Industry-standard authentication flow
- Dynamic Client Registration (DCR) - MCP clients can self-register for OAuth
- User Management - Multi-user support with role-based access
- Backend Token Management - Secure storage and auto-refresh of MCP server credentials
- Rate Limiting - Per-user request throttling with configurable limits
📊 **Real-Time Monitoring**
- Live MCP Activity Monitor - Real-time request feed with auto-refresh
- Performance Metrics - Response times, success rates, requests/minute
- Security Event Logging - Unauthorized access attempts, rate limiting, suspicious activity
- Health Checking - Automatic health checks for all connected MCP servers
🎛️ **Admin Dashboard**
- User Management - Create, edit, and manage users
- MCP Server Configuration - Add and configure backend MCP servers
- Token Management - Monitor token health and manual refresh
- Security Events - View and filter security events
- Security Audit - MCP vulnerability scanning
🛡️ **Security**
- JWT token-based authentication with refresh tokens
- Secure credential storage with encrypted database support
- CORS protection and request validation
- Security event logging and monitoring
- File-based logging - JSON logs for auth & MCP requests with rotation; security events remain in SQLite for audit/queries
📸 Screenshots
🖥️ Dashboard - Real-time Overview
Live statistics, server health monitoring, top tools usage, and recent activity feed
🔧 MCP Servers - Connection Management
Manage backend MCP server connections with status monitoring and health checks
📊 MCP Activity Monitor - Real-time Request Tracking
Monitor live MCP requests with detailed metrics, top tools ranking, and request feed
🛡️ Security Events - Threat Detection
Track security events, rate limiting, suspicious payloads, and unauthorized access attempts
🔒 MCP Security Audit - Vulnerability Scanner
*Test any MCP server for security vulnerabili
Environment Variables
DATABASE_URLrequiredConnection string for the SQLite database used for security events and configurationConfiguration
{"mcpServers": {"auth-mcp-gateway": {"command": "python", "args": ["-m", "authmcp_gateway"]}}}