A self hosted gateway for the Model Context Protocol: connect MCP servers once, then serve every server, each group or a single server to AI clients through authenticated endpoints
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| MCPHub on Ubuntu 24.04 | Azure | Ubuntu 24.04 | Standard | View · Guide |
MCPHub is an open source gateway and control plane for the Model Context Protocol, the standard that lets AI assistants and agents call external tools. You connect MCP servers to it once, local stdio servers started with npx or uvx as well as remote SSE and streamable HTTP servers, and MCPHub publishes them to clients such as Claude Code, Cursor and OpenWebUI through stable endpoints: one for every server, one for each group and one for each single server. Groups can expose only chosen tools from a server, individual tools can be switched off or have their descriptions rewritten, and bearer keys can be limited to particular groups or servers, so each agent sees exactly the tools it needs. A web dashboard manages servers, groups, users, keys and per user credentials, with logs and health status, and it all runs as one lightweight Node.js process with a JSON settings file.
Out of the box upstream MCPHub creates its admin account with a random password that it prints to the server log. cloudimg generates the admin password, the MCP bearer key, the session signing secret and the credential encryption key for each virtual machine at first boot, passes the password to MCPHub from a root only file so it never reaches a log, and proves the admin login and that every MCP endpoint refuses callers without a key before nginx is allowed to start. MCPHub runs as an unprivileged account on loopback only behind nginx with HTTPS and a certificate generated per virtual machine, and port 80 only redirects. It is built from the upstream release tag with the upstream lockfile, ships two example MCP servers that need no network or API key, and every deployment is fully patched with a paired deploy guide and 24/7 cloudimg support.