mcf-api

Perform gateway API operation: $ARGUMENTS

Authentication Setup

All authenticated endpoints require a JWT bearer token.

Generate a token

# Admin token (full access — teams: null + is_admin: true)
export MCPGATEWAY_BEARER_TOKEN=$(python -m mcpgateway.utils.create_jwt_token \
  --username [email protected] --exp 10080 --secret $JWT_SECRET_KEY | tr -d '\n')

# Team-scoped token
export MCPGATEWAY_BEARER_TOKEN=$(python -m mcpgateway.utils.create_jwt_token \
  --username [email protected] --exp 60 --secret $JWT_SECRET_KEY --teams '["team-uuid"]' | tr -d '\n')

# Public-only token (automation)
export MCPGATEWAY_BEARER_TOKEN=$(python -m mcpgateway.utils.create_jwt_token \
  --username [email protected] --exp 60 --secret $JWT_SECRET_KEY --teams '[]' | tr -d '\n')

Token scoping rules

JWT teams	is_admin: true	is_admin: false
Key MISSING	PUBLIC-ONLY	PUBLIC-ONLY
null	ADMIN BYPASS	PUBLIC-ONLY
[]	PUBLIC-ONLY	PUBLIC-ONLY
["t1"]	Team + Public	Team + Public

Base URLs

• Dev: http://127.0.0.1:8000 (make dev)
• Prod: http://localhost:4444 (make serve)
• Docker: http://localhost:8080 (nginx proxy)

Common Operations

Health Check (no auth)

curl -s http://localhost:4444/health | jq
curl -s http://localhost:4444/ready | jq

Register a Gateway (external MCP server)

curl -s -X POST -H "Authorization: Bearer $MCPGATEWAY_BEARER_TOKEN" \
     -H "Content-Type: application/json" \
     -d '{
           "url": "http://localhost:9000",
           "name": "my-mcp-server",
           "description": "Example MCP server",
           "transport": "STREAMABLEHTTP"
         }' \
     http://localhost:4444/gateways | jq

Transport options: SSE, STREAMABLEHTTP, WEBSOCKET, STDIO

With bearer auth

curl -s -X POST -H "Authorization: Bearer $MCPGATEWAY_BEARER_TOKEN" \
     -H "Content-Type: application/json" \
     -d '{
           "url": "http://localhost:9000",
           "name": "auth-server",
           "auth_type": "bearer",
           "auth_token": "server-secret-token"
         }' \
     http://localhost:4444/gateways | jq