Prefect products run in production at 2,000+ customers.

Agents are new. Supervision is not.

Teams are handing agents real work, and trust caps how much. Supervision is how we have always earned it: checklists, approvals, code review. An agent is intelligence plus context. Rent the intelligence, own the context.

Any agent

Context layer

What does your agent know?

Turns your data and business knowledge into context agents can rely on.

How Dagster does it

FastMCP GatewayCommercial

Configured access

ToolsAllowed for task
SkillsAllowed for task
Policy contextFrom the context layer
Other capabilityNot permitted

What can your agent do? Each agent gets only the tools it is permitted.

Outcome layer

What is your agent's goal?

Orchestrates the work, verifies every result and recovers when a step fails.

How Prefect does it

Open sourceThe framework for building MCP servers and clients in Python or TypeScript

Connect the three and every agent decision traces back to its source. Trust the process, not your agents.

Write a function. Ship an MCP tool.

Add a decorator in Python or TypeScript and FastMCP does the rest.

Schema and docs from your function signature
stdio or HTTP transport, with auth built in
Adopted into the official MCP Python SDK in 2024
58M+ downloads a month, 28.3k+ GitHub stars, Apache 2.0

When a server needs to be always-on, shared and access-controlled, one git push takes it to FastMCP Gateway. No rewrite.

Start free FastMCP quickstart

from fastmcp import FastMCP
mcp = FastMCP("my-tools")
@mcp.tool
def refund_status(order_id: str) -> dict:
    """Look up a refund by order id."""
    return orders.refund_status(order_id)

# Same code. Push it and FastMCP Gateway hosts and governs it.
$ git push origin main
# Live in about 60 seconds at
# https://my-tools.horizon.prefect.io

FastMCP Gateway

Governance and controls for every tool call.

Instructions are not controls. A system prompt is guidance a model can ignore. FastMCP Gateway puts one governed endpoint between your AI clients and your tools: every call authenticated, authorized and logged.

See how access control works

FastMCP Gateway

ACCESS GRANTED

Identity

Sales Agent

MCP Server

Salesforce CRM

Policy Check Authorized

Fine-grained access control with full audit trail

Identity: Tool-level permissions for users and agents, set through the identity provider you already run.
Policy: Each agent gets only the tools it is permitted for the task, from your systems, from Dagster or from third-party servers.
Audit: Who called which tool, when, and whether access was allowed, one record per call.

Enterprise MCP Gateway

FastMCP Gateway works with your identity provider.

Put FastMCP Gateway between every AI client and every MCP tool, then keep identity anchored in the IdP your company already trusts. User claims, group membership, policy decisions, and audit events stay in one governed path. Popular configurations include Okta, Microsoft Entra ID, Google Workspace, Auth0, OneLogin, JumpCloud, Ping Identity, CyberArk, and Duo.

Claims

Read from IdP

Policy

Applied per tool

Audit

Written once

Supported identity providers

Ping Identity

SAML, SCIM

CyberArk

SAML, SCIM

Duo

SAML

ADP OpenID Connect

Workday

Identity provider

FastMCP Open Source versus FastMCP Gateway.

Capability	FastMCP Open Source	FastMCP Gateway
Build tools and servers in Python or TypeScript	FastMCP Open SourceIncluded	FastMCP GatewayFastMCP or any MCP framework
Hosting	FastMCP Open SourceYou run it	FastMCP GatewayLive URL in about 60 seconds
OAuth 2.1 and client registration	FastMCP Open SourceYou build it	FastMCP GatewayIncluded
Autoscaling and monitoring	FastMCP Open SourceYou build it	FastMCP GatewayIncluded
Registry of servers and owners	FastMCP Open SourceNot included	FastMCP GatewayIncluded
Tool-level RBAC from your IdP	FastMCP Open SourceNot included	FastMCP GatewayIncluded
Audit trail for every call	FastMCP Open SourceNot included	FastMCP GatewayIncluded
Virtual servers, one endpoint per team	FastMCP Open SourceNot included	FastMCP GatewayIncluded

Learn more

Start free

Teams already run MCP in production on FastMCP Gateway.

All customer stories

Nitorum Capitalcase-study

FastMCP Gateway is the avenue by which we can best deploy MCP within our organization. Out of the box, take my GitHub repo, launch it, and it just works for us.

JB

James Brink

Head Trader

Theory Venturescase-study

Because we've built these bespoke MCP tools with FastMCP Gateway, I can stay in my LLM chat UI for a lot longer and get the information I need directly without having to tab through all these different places to copy and paste.

FastMCP Gateway actually had the best onboarding experience on my team. Even people who have not done tech before were able to onboard onto the tool, which is a very strong sign of ease of use.

SS

Smit Shah

Founder

Made to pass the security review.

A governed yes for security, instead of a blanket no.

SOC 2 Type II
GDPR
HIPAA-ready
99.9% uptime SLA
Annual third-party pen tests

Host with us or keep servers in your cloud
Run servers on FastMCP Gateway, or keep them in your own environment and connect privately. FastMCP Gateway is the control plane either way.
Your IdP is the source of truth
SSO over SAML, OIDC, OAuth 2.1 and SCIM, with RBAC down to the tool. Agents never hold raw credentials.
Nothing faces the public internet
AWS PrivateLink, GCP Private Service Connect and Azure Private Endpoints, plus IP allowlisting.
Every call is on the record
One audit history for every tool call, exportable for your auditors.

Put a governed endpoint in front of your first MCP server today.

Free for one developer and up to 200 servers. Add tool-level RBAC, a private registry and audit as your team's footprint grows.

Start free Book a demowith our team

Workflow automation

MCP servers, hosting & gateway

Asset-based orchestration

Deliver context and tools to every agent, safely

FastMCP is the open-source framework for building MCP servers. FastMCP Gateway runs them in production.

Agents are new. Supervision is not.

Write a function. Ship an MCP tool.

Governance and controls for every tool call.

FastMCP Gateway works with your identity provider.

Access People HR

Apple

AWS Cognito

Breathe HR

CAS SAML

ClassLink

Cloudflare

CyberArk SCIM

Entra ID OIDC

Entra ID SCIM

Fourth

GitLab OAuth

Google OAuth

Google SAML

Intuit OAuth

JumpCloud SCIM

LastPass

Login.gov OpenID Connect

Microsoft OAuth

NetIQ

Okta OIDC

Okta SCIM

OneLogin SCIM

PingFederate SAML

PingOne SAML

Rippling SAML

SailPoint SCIM

Salesforce SAML

Shibboleth Unsolicited SAML

Slack OAuth

Supabase + WorkOS SSO

VMware

Xero OAuth

Okta

Microsoft Entra ID

Google Workspace

Auth0

OneLogin

JumpCloud

Ping Identity

CyberArk

Duo

ADP OpenID Connect

Auth0

BambooHR

Bubble Plugin

Cezanne HR

Clever OIDC

CyberArk SAML

Duo

Entra ID SAML

Firebase

GitHub OAuth

Google Directory Sync

Google OIDC

HiBob

JumpCloud SAML

Keycloak

LinkedIn OAuth

Microsoft AD FS SAML

miniOrange

NextAuth.js

Okta SAML

OneLogin SAML

Oracle SAML

PingFederate SCIM

React Native Expo

Rippling SCIM

Salesforce OAuth

Shibboleth Generic SAML

SimpleSAMLphp

Deliver context and tools
to every agent, safely