MCP Proxy

  • 1 minute(s) read
Prev Next

MCP Proxy

The Orchestrator can operate as an MCP proxy in order to protect existing MCP servers.

Configuration Options

From the Applications page, create an MCP Proxy App by clicking the Create button and selecting MCP Proxy App from the Create a new Application menu.

Upstream

Upstream defines how the proxy communicates with the target application. The proxy currently supports the HTTP Streaming transport and will soon support the Standard I/O transport.

For the HTTP streamable transport, custom TLS and network configurations can optionally be defined. These settings can be used to configure a mutual TLS connection, or to optimize the proxy's performance.

Namespacing

Namespacing defines how and whether tools are namepsaced. Namespaces are added to tool names in order to prevent potential tool name conflicts and to provide agents/LLMs the necessary context to ensure the correct tool is called.

Note: that when writing authorization policy, the namespace is stripped prior to evaluation. This means that namespaces can be changed without the need to update policy rules.

Authorization

Authorization defines both the inbound and outbound policy for the application.

Inbound policy is used to determine whether a given tool call is authorized. Inbound policy is evaluated using OPA and written using Rego.

Outbound policy is used to define how authorization against the upstream MCP server is achieved. Outbound authorization can leverage OAuth token exchange in order to securely maintain the identity context of all actors.

Deploying the application

Deployments in Maverics are how you bundle and publish your orchestration configurations — including applications, user flows, identity services, and policy logic — to your orchestrators for enforcement. Before deploying, review the Deployments Overview to understand how environments, services, and storage work together in Maverics.

Add your application to a deployment

Once your storage is configured, you can deploy your application using the Deployment Manager:

  1. Navigate to Deployments in the Maverics UI.

  2. Create a new deployment or select an existing one.

  3. Add your application(s) to the deployment.

  4. Click Publish Preview to review and validate the deployment configuration.

  5. After confirming the preview looks correct, click Publish to push the configuration to your orchestrators.

Related articles