Gateway Administration

{# ---- compute safe pagination values first ---- #} {% set page = (pagination.page if pagination is defined else (page if page is defined else 1)) %} {% set per_page = (pagination.per_page if pagination is defined else (per_page if per_page is defined else 50)) %} {% set total_items = (pagination.total_items if pagination is defined else (total_items if total_items is defined else (tools|length if tools is defined else 0))) %} {% set total_pages = (pagination.total_pages if pagination is defined else ((total_items + per_page - 1) // per_page)) %} {% set has_prev = page > 1 %} {% set has_next = (page * per_page) < total_items %} {% set pagination = { 'page': page, 'per_page': per_page, 'total_items': total_items, 'total_pages': total_pages, 'has_prev': has_prev, 'has_next': has_next } %} {# build the refresh URL for controls #} {% set controls_url = root_path + '/admin/tools/partial' + '?render=controls' + '&page=' + page|string + '&per_page=' + per_page|string + '&include_inactive=' + (include_inactive|default(false)|string|lower) %}

[
  {
    "name": "weather-api",
    "displayName": "Weather API Tool",
    "url": "https://api.openweathermap.org/data/2.5/weather",
    "integration_type": "REST",
    "request_type": "GET",
    "description": "Get current weather data for any location",
    "auth_type": "bearer",
    "auth_value": "your-openweather-api-key-here",
    "headers": {
      "Accept": "application/json",
      "User-Agent": "MCP-Gateway/1.0"
    },
    "input_schema": {
      "type": "object",
      "properties": {
        "q": {"type": "string", "description": "City name"},
        "units": {"type": "string", "description": "Temperature units"}
      },
      "required": ["q"]
    },
    "jsonpath_filter": "$.main",
    "tags": ["weather", "api", "external"]
  }
]

Create New API Token

Token Name *

Expires In (Days)

Description

⚠️ Public Access Token

You are currently viewing "All Teams". Tokens created in this context will have public-only access.

✅ This token CAN access:

• Public servers (virtual servers marked as public)
• Public tools, resources, and prompts

❌ This token CANNOT access:

• Team-scoped or private servers, tools, resources, and prompts

💡

To create a token with full Team Access, select a specific team from the header above.

Team-level scoping enabled. This token will be scoped to:

Token can access all resources (public, team, and private) within this team.

Token Scoping (Optional)

Server ID (Limit to specific server)

IP Restrictions (CIDR format)

Permissions (comma-separated)

Create Token

Add New A2A Agent

Agent Name

Endpoint URL

Agent Type Generic OpenAI Anthropic Custom

Authentication Type None Basic Bearer Token Custom Headers OAuth 2.0

Username

Password

Token

Custom Headers Add Header

Grant Type Authorization Code (User Delegation) Client Credentials (Machine-to-Machine) Resource Owner Password Credentials (Keycloak/Legacy)

Issuer URL

The OAuth Authorization Server issuer URL. Required for DCR (Dynamic Client Registration).

Client ID (optional for DCR)

💡 Leave empty if the server supports DCR - credentials will be auto-registered

Client Secret (optional for DCR)

💡 Leave empty if the server supports DCR - credentials will be auto-registered

Username * (for password grant)

Required for Resource Owner Password Credentials grant type (Keycloak).

Password * (for password grant)

Required for Resource Owner Password Credentials grant type (Keycloak).

Token URL

Authorization URL

The OAuth provider's authorization endpoint URL

Redirect URI

This must match the redirect URI configured in your OAuth application

💡 Use: {{ request.base_url }}oauth/callback

Token Management

Store access tokens for reuse Automatically refresh expired tokens

Token management options for Authorization Code flow

Authorization Code Flow Setup

After creating this gateway, you'll need to:

1. Click the "🔐 Authorize" button in the gateway list
2. Complete the OAuth consent flow with your provider
3. Return to the admin panel to see authorization status

Note: The Agent will be created but tools won't work until OAuth authorization is completed.

Scopes

Space-separated list of OAuth scopes (e.g., "repo read:user")

Description

Tags

Visibility

🌍 Public

👥 Team

🔒 Private

Passthrough Headers List of headers to pass through from client requests (comma-separated, e.g., "Authorization, X-Tenant-Id, X-Trace-Id").

Submitting...

Add A2A Agent

Register New gRPC Service

Service Name

gRPC Target (host:port)

Description

Enable TLS

Enable Server Reflection

TLS Certificate Path

TLS Key Path

{% if teams %}

Team No Team (Global) {% for team in teams %} {{ team.name }} {% endfor %}

{% endif %}

Register gRPC Service

Roots define the base folders accessible for file-based Resources. They enable MCP servers to browse local content.

System Metrics

Real-time system metrics showing counts across all entity types. Useful for capacity planning and system monitoring.

Top Performers

View the most frequently used tools, resources, prompts, and servers with paginated results.