Concepts

Four things, each built on the last:

Credential  →  an OAuth2 grant, an app login that signs in as itself, or a static API key
Upstream    →  a base URL to forward to
Route       →  a local path prefix that forwards to an upstream, attaching any number of credentials
Funnel      →  a local MCP endpoint pooling several MCP servers, filtered per agent

You need a credential and a route to reach a protected API. You need a funnel only if you want to shape what an agent sees.

Edit this page on the wiki Request support · Report vulnerabilities privately