Federated MCP gateway: one OAuth 2.1-protected, spec-compliant MCP server in front of all your apps. Backends stay plain HTTP (~120-line contract) or proxied native MCP servers with a per-user token vault. Scope-filtered tools, live discovery, audit trail. Give agents curated, governed access to your whole stack — one URL, one token.
Instructions file CodexOpenCode
Instructions for wellknownmcp/cortex-gateway, covering agents.md, what this is, verify the claims yourself, the demo authorization server builds independently and protected-resource metadata (rfc 9728).