How do I install the secure mcp gateway mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `API_KEY`, `BASE_URL`, `AUTH_SECRET`, `AUTH_GOOGLE_ID`, `AUTH_GOOGLE_SECRET`, `AUTH_OKTA_ID`, `AUTH_OKTA_SECRET`, `AUTH_AZURE_AD_ID` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Secure MCP Gateway MCP Server

A secure, open-source OAuth gateway for MCP authentication

Remote serverstreamable-httpTypeScript

What is the Secure MCP Gateway MCP Server?

A secure, open-source OAuth gateway for MCP authentication

What it actually does

Self-Hosted Gateway — Deploy within your own infrastructure for maximum control
OAuth Authentication — Secure authentication with any OAuth provider via Auth.js
TypeScript Support — Fully typed for robust development
STDIO — Standard input/output MCP servers
StreamableHTTP — HTTP-based streaming connections via http://localhost:3000/mcp (or https:///mcp for hosted deployments)

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
repo	Full access to repositories (public and private)
public_repo	Access to public repositories only
read	user - Read access to user profile information
user	email - Access to user email addresses

How to install the Secure MCP Gateway MCP Server

{
  "mcpServers": {
    "your-server": {
      "command": "npx",
      "args": ["-y", "@your-mcp-server"],
      "env": {
        "API_KEY": "your-api-key"
      }
    },
    "octocode": {
      "command": "npx",
      "args": ["octocode-mcp"]
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

Variable	Description	Required
API_KEY	Credential the server authenticates with.	Yes
BASE_URL	Endpoint or connection string the server talks to.	Yes
AUTH_SECRET	Credential the server authenticates with.	Yes
AUTH_GOOGLE_ID	Configuration value read at startup.	Optional
AUTH_GOOGLE_SECRET	Credential the server authenticates with.	Yes
AUTH_OKTA_ID	Configuration value read at startup.	Optional
AUTH_OKTA_SECRET	Credential the server authenticates with.	Yes
AUTH_AZURE_AD_ID	Configuration value read at startup.	Optional

Example prompts to try

“Use Secure MCP Gateway to Self.”
“Use Secure MCP Gateway to STDIO.”
“Use Secure MCP Gateway to StreamableHTTP.”

Frequently asked questions

A secure, open-source OAuth gateway for MCP authentication Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.