Everything you need to run MCPG.
Quickstart in 60 seconds, dig into the architecture, write your own plugins, or run an HA fleet on Kubernetes.
Pick a path.
Identity — OIDC, mTLS, SPIFFE, API keys
Configure identity resolution. MCPG ships five identity plugins; pick one or chain them.
Kubernetes install with Helm
Run an HA MCPG fleet on Kubernetes with the operator + Helm chart. NATS or Redis for shared state.
Multi-tenant deployments
Operate MCPG for multiple teams or customers — orgs, workspaces, environments, RBAC, and tenant isolation.
Observability — Prometheus, OTLP, audit
Wire MCPG to your existing telemetry pipeline. Prometheus exposition, OpenTelemetry traces, and a tamper-evident audit ledger.
Plugin authoring
Write a plugin in Rust or as a WASM Component. Sign it. Distribute via OCI.
Policy authorization — Cedar, OPA, Casbin
Authorize tool calls, prompts, and resources. Three engines; pick one or chain them.
Quickstart in 60 seconds
Run gateway + control plane + dashboard with one command. No external services.