MCP Proxy
An MCP Proxy reads an OpenAPI 3.0 specification and generates one MCP tool per REST endpoint, making any conventional HTTP API accessible to MCP-compatible agents without modification.
Overview
An MCP proxy is a named component independent of any surface. Once created, it can be targeted by any number of MCP surfaces using the proxy:// scheme. Attaching a proxy to a surface adds authentication, OPA policies, observability, and credential injection on top of the generated tools. Without a surface, agents can call tools directly at the proxy route.
The proxy route is formed from the configured Listen Address, Path Prefix, and Custom Endpoint Path.
Fields
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
| Name | string | Yes | — | Human-readable label shown in the dashboard proxy list and selector dropdowns. Must be unique within the gateway. |
| Description | string | No | None | Free-text notes for other administrators. Not used in routing. |
| Listen Address | string | Yes | — | The host and port the proxy listener binds to. Selected from the gateway’s configured listener addresses. |
| Path Prefix | string | Yes | — | URL prefix for this proxy’s route. Combined with Custom Endpoint Path to form the full proxy route. |
| Custom Endpoint Path | string | Yes | — | Final path segment that uniquely identifies this proxy’s route within the selected prefix. |
| Base URL | URL | Yes | — | Base address of the upstream REST API. Tool calls are forwarded to this URL with the endpoint path appended. |
| OpenAPI Specification | string (YAML) | Yes | — | OpenAPI 3.0 specification in YAML format. The gateway parses this on save and generates one MCP tool per endpoint. No manual tool mapping is required. |
Proxy route
The proxy route is the full address at which MCP clients can reach the proxy directly, before any surface is involved:
https://<listen-address><path-prefix><custom-endpoint-path>The dashboard shows a live MCP Proxy Route preview during the creation wizard.
Tool generation
The gateway parses the OpenAPI specification when the proxy is saved and creates one MCP tool per endpoint. Tool names are derived from the endpoint’s operationId when present, or from the HTTP method and path pattern otherwise.
Tool definitions update immediately when the OpenAPI specification is changed and saved. MCP surfaces targeting the proxy reflect the updated tool list without reconfiguration.
Targeting a proxy from a surface
In the canvas editor, open the Managed Agent node, set Endpoint Type to via MCP Proxy, and select the proxy from the MCP Proxy dropdown. The dashboard sets the endpoint automatically.
See Target for full Target Endpoint URL documentation, including all supported endpoint schemes.
Sandbox
The proxy editor includes a built-in sandbox for testing tool calls directly from the dashboard without connecting an external client. Select Connect & List Tools to issue a tools/list call, then select a tool to run it with custom input parameters.
The Sandbox tab is visible only when the proxy is saved and its status is active. Save any unsaved changes before opening the sandbox.
Related
- Expose a REST API as MCP tools: step-by-step guide to creating a proxy and attaching it to a surface.
- Target: Target field reference, including the
proxy://endpoint scheme. - MCP surface starter: create an MCP surface to attach a proxy to.
- Control MCP tool access with per-tool policies: restrict which callers can invoke specific proxy-generated tools using Rego policies.
Glad to hear it! Please tell us how we can improve more.
Sorry to hear that. Please tell us how we can improve.
Thank you for sharing your feedback so we can improve your experience.