Skip to main content
Authentication in FastMCP Gateway provides a shared identity layer for MCP servers served through the gateway. The gateway verifies callers before requests reach server code, so hosted servers can use the same OAuth-compatible MCP client sign-in, API key validation, organization membership checks, and request outcomes. This moves authentication policy out of individual server implementations and into the platform path. Security and platform teams can define how protected server endpoints accept callers, then apply that behavior consistently across servers. When a hosted server needs to own authentication itself, disabling FastMCP Gateway authentication lets FastMCP Gateway forward requests without validating the caller at the gateway. Authentication in FastMCP Gateway has two related paths: The same FastMCP Gateway identity can appear in both paths, but the request paths are different. Authenticating to a FastMCP Gateway-served MCP endpoint lets a client call tools, resources, and prompts exposed by that server. Signing in to the FastMCP Gateway dashboard lets a user manage servers, members, keys, and settings.
A FastMCP Gateway API key can authenticate a REST API request or an MCP request. The target URL determines which path applies: platform management for REST API routes, server usage for MCP endpoint routes.
Authorization is separate. After FastMCP Gateway identifies the caller, authorization decides what that caller can see, manage, or invoke. For role and access resolution, see Authorization.
Authentication is enabled by default for hosted MCP server endpoints. Disabling it for a hosted server is available on Developer and Enterprise.

​
Connecting to MCP servers

Use this path when the caller is trying to use a server through its MCP endpoint. This includes agents, MCP clients, scripts, and tools that send requests to a FastMCP Gateway deployment URL. Hosted server traffic passes through the gateway. The gateway identifies the deployment, reads the server’s authentication mode, verifies the caller when required, checks server access, and only then forwards the request to your MCP server. This layer protects the server endpoint. It is separate from the dashboard and REST API sign-in path used to manage that server. A hosted server’s authentication settings expose one control: FastMCP Gateway Authentication, which is either enabled or disabled.
When a server is protected by FastMCP Gateway, the endpoint is scoped to the server’s FastMCP Gateway organization. A caller must authenticate as a user or service account in that organization before the request can reach your server. Authorization settings can then narrow access further. To share a protected server with another person, invite them to the server’s organization and grant the appropriate access.
When a server is protected by FastMCP Gateway, callers must authenticate with a bearer credential:
FastMCP Gateway accepts two categories of bearer credentials for protected MCP traffic:
MCP clients that support authenticated server connections can use the FastMCP Gateway deployment URL and complete sign-in in the client. FastMCP Gateway accepts the resulting bearer token as the signed-in user and checks that user against organization and server access.If your client does not support interactive sign-in, use a FastMCP Gateway API key as the bearer token instead.
Non-interactive clients can send a FastMCP Gateway API key as the bearer token. FastMCP Gateway API keys start with fmcp_, are shown only when created, and can be revoked independently. For key management, see API keys.
An identity provider token is not a substitute for either credential. When a member signs in through SSO, WorkOS validates the identity provider flow and FastMCP Gateway issues the identity used at its gateway. A bearer token issued directly by Entra ID, Okta, or another provider is not accepted by a FastMCP Gateway-protected MCP endpoint. If your server must validate an externally issued token itself, use a hosted server with FastMCP Gateway Authentication disabled. Your server then owns token validation and application authorization, and FastMCP Gateway cannot apply identity-based server or capability access to those requests. If the credential is valid, the gateway forwards the request with the verified caller identity available to downstream platform checks and request observability. Missing, malformed, expired, revoked, or wrong-organization credentials stop at the gateway.
The gateway runs before your server code. A rejected authentication request stops before server compute starts or your handler runs.

​
Changing a hosted server’s authentication

Configure hosted server authentication from the server’s authentication page.
1

Open authentication

Go to the server, then open Access and Authentication.
2

Enable or disable FastMCP Gateway Authentication

Enabled means clients must prove identity to FastMCP Gateway before the request reaches the server. Disabled means FastMCP Gateway passes requests through without a FastMCP Gateway authentication check.
3

Save

Authentication changes apply to new requests as soon as you save. You do not need to redeploy the server.
Disabling FastMCP Gateway authentication removes FastMCP Gateway’s gateway authentication and server access checks for that hosted server. Do so only when the endpoint is intentionally public or your server implements its own authentication and authorization. Any credentials your server requires are handled by your server, not by gateway authentication.
If you want clients to authenticate with an OAuth provider or token system that your server controls, implement that authentication in your server and disable FastMCP Gateway authentication. FastMCP Gateway then does not validate the caller’s credential before forwarding the request, and your server is responsible for rejecting unauthenticated or unauthorized requests. Remix servers and external servers always keep FastMCP Gateway authentication enabled. It cannot be disabled for them.

​
External authentication

External authentication adds a second credential after FastMCP Gateway identifies the caller. External servers use it when FastMCP Gateway calls the remote MCP endpoint. Hosted servers can use delegated authorization to exchange the identified user for an upstream credential before hosted code runs. The FastMCP Gateway credential and downstream credential protect different boundaries. A valid FastMCP Gateway sign-in does not guarantee that the caller has authorized the remote provider. A missing, expired, or revoked downstream credential can fail after FastMCP Gateway authentication and server access checks have succeeded. FastMCP Gateway supports per-user OAuth, per-user API keys, and organization-shared API keys for the downstream boundary. To choose a mode, configure its credentials, and understand hosted delegated exchange, see External authentication.

​
Common MCP endpoint outcomes

FastMCP Gateway identified the deployment, accepted the caller’s credential, found the caller in the expected organization, and authorization allowed the request to continue.
The request omitted a bearer credential, used another Authorization scheme, sent an empty token, sent an expired user token, or used an API key that is invalid, inactive, or revoked.
FastMCP Gateway authenticated the caller, but authorization denied access to the organization, server, or requested capability. Check organization membership, server access, custom server roles, and tool-level access settings. For the role model, see Authorization.
The deployment URL maps to no live server, or FastMCP Gateway intentionally conceals a server from an authenticated caller that lacks discovery access.
Authentication and gateway routing succeeded. Check your server logs, request logs, and your server’s own application-level authentication or authorization logic.

​
Signing in to FastMCP Gateway

Use this path when the caller is managing FastMCP Gateway itself: opening the dashboard, calling the REST API, creating API keys, deploying servers, inviting members, or changing access settings.

Dashboard

Human users sign in to FastMCP Gateway, choose an organization, and manage servers, members, keys, builds, and settings according to their role.

REST API

API clients authenticate with a bearer credential or an active browser session. API requests are checked against the authenticated user’s or service account’s access.

Automation

Service accounts and user-owned API keys authenticate scripts, CI/CD, and other machine workflows.

​
Actor identities

Every authenticated platform request resolves to an actor. An actor is the FastMCP Gateway identity that can own API keys, belong to an organization, and receive access grants. API keys can belong to users or service accounts. This means a machine workflow can authenticate as a service account while participating in the same organization and server access model as a human user.

​
REST API authentication

Authenticated REST API routes accept the following credentials: If both an Authorization header and a browser cookie are present, the bearer credential takes precedence. Invalid or missing credentials return 401. For scripts, CI/CD, Terraform, and other direct API clients, use a bearer credential. Browser sessions are intended for dashboard-originated API requests. API keys inherit access from the user or service account that owns them. If the owning actor loses organization or server access, requests made with that key lose the same access. Revoked keys no longer authenticate. All successful REST API authentication resolves to an actor identity. FastMCP Gateway uses that actor identity to check organization, server, and feature access.

​
Operational guidance

For production servers, keep FastMCP Gateway authentication enabled and use server access controls to decide who can call the server. Prefer service accounts and API keys for automation, and user sign-in for interactive MCP clients. Rotate API keys by creating a new key, updating the client, and revoking the old key after traffic has moved. Because API keys are shown only at creation time, store them in your secret manager before closing the creation dialog. Disable FastMCP Gateway authentication only when you have a clear public-access requirement or an independent authentication layer inside the server. When it is disabled, FastMCP Gateway request logs can still show gateway traffic, but FastMCP Gateway no longer identifies the caller before forwarding the request.

Authorization

Learn how roles and access grants decide what authenticated actors can do.

Gateway

Learn how requests move through routing, authentication, access checks, and MCP session handling.

API keys

Create, rotate, and revoke keys for users and automation.

External authentication

Configure downstream OAuth and API-key credentials for external and hosted servers.