MCP gateway and governance
for enterprise agents

Give teams a secure way to discover, manage, and control MCP servers without slowing down development.

54M+ FastMCP downloads/mo

70% of MCP servers worldwide

OAuth 2.1 + RBAC built in

Start free Book a demowith our team

Prefect is trusted in Production.

Enterprise MCP Gateway

FastMCP Gateway works with your identity provider.

Put Gateway between every AI client and every MCP tool, then keep identity anchored in the IdP your company already trusts. User claims, group membership, policy decisions, and audit events stay in one governed path. Popular configurations include Okta, Microsoft Entra ID, Google Workspace, Auth0, OneLogin, JumpCloud, Ping Identity, CyberArk, and Duo.

Claims

Read from IdP

Policy

Applied per tool

Audit

Written once

Supported identity providers

65 supported identity integrations across SAML, OIDC, OAuth, SCIM, and directory sync.

IdentityGatewayMCP

Access People HR

Identity provider

Apple

Identity provider

AWS Cognito

Identity provider

Breathe HR

Identity provider

CAS SAML

SAML

ClassLink

Identity provider

Cloudflare

Identity provider

CyberArk SCIM

SCIM

Entra ID OIDC

OIDC

Entra ID SCIM

SCIM

Fourth

Identity provider

GitLab OAuth

OAuth

Google OAuth

OAuth

Google SAML

SAML

Intuit OAuth

OAuth

JumpCloud SCIM

SCIM

LastPass

Identity provider

Login.gov OpenID Connect

OIDC

Microsoft OAuth

OAuth

NetIQ

Identity provider

Okta OIDC

OIDC

Okta SCIM

SCIM

OneLogin SCIM

SCIM

PingFederate SAML

SAML

PingOne SAML

SAML

Rippling SAML

SAML

SailPoint SCIM

SCIM

Salesforce SAML

SAML

Shibboleth Unsolicited SAML

SAML

Slack OAuth

OAuth

Supabase + WorkOS SSO

SSO

VMware

Identity provider

Xero OAuth

OAuth

Okta

SAML, OIDC, SCIM

Microsoft Entra ID

SAML, OIDC, SCIM

Google Workspace

SAML, OIDC

Auth0

SAML federation

OneLogin

SAML, SCIM

JumpCloud

SAML, SCIM

Ping Identity

SAML, SCIM

CyberArk

SAML, SCIM

Duo

SAML

ADP OpenID Connect

OIDC

Auth0

Identity provider

BambooHR

Identity provider

Bubble Plugin

Identity provider

Cezanne HR

Identity provider

Clever OIDC

OIDC

CyberArk SAML

SAML

Duo

Identity provider

Entra ID SAML

SAML

Firebase

Identity provider

GitHub OAuth

OAuth

Google Directory Sync

Directory sync

Google OIDC

OIDC

HiBob

Identity provider

JumpCloud SAML

SAML

Keycloak

Identity provider

LinkedIn OAuth

OAuth

Microsoft AD FS SAML

SAML

miniOrange

Identity provider

NextAuth.js

Identity provider

Okta SAML

SAML

OneLogin SAML

SAML

Oracle SAML

SAML

PingFederate SCIM

SCIM

React Native Expo

Identity provider

Rippling SCIM

SCIM

Salesforce OAuth

OAuth

Shibboleth Generic SAML

SAML

SimpleSAMLphp

SAML

Supabase + AuthKit

AuthKit

Vercel OAuth

OAuth

Workday

Identity provider

FastMCP Authority

Everything we learned building 70% of MCP servers - yours by default.

FastMCP is the open-source Python framework behind 70% of MCP servers worldwide, with 54M+ downloads last month. Every pattern we discovered, every failure mode we fixed informs how our Gateway operates.

FastMCP Gateway runs those servers in production. If you already use the framework, deployment takes one git push. Our Gateway also works with any spec-compliant MCP server built with another framework.

From framework to production

From FastMCP code to a live MCP server URL.

Write your server in Python, push to GitHub, and get a production MCP server URL in 60 seconds. Our Gateway adds OAuth 2.1, dynamic client registration, scaling, and monitoring without extra deployment scripts.

View FastMCP documentation

from fastmcp import FastMCP
mcp = FastMCP("my-tools")
@mcp.tool()
def query_database(sql: str) -> dict:
    return db.execute(sql)

# Deploy to FastMCP Gateway
$ git push origin main
# Live at https://my-tools.horizon.prefect.io in 60 seconds

Managing MCP servers at scale is the real challenge.

One MCP server is easy. Fifty servers across 5,000 employees, each needing authentication, access control, and monitoring, is the problem FastMCP Gateway solves.

Where are your MCP servers deployed?

Deploy each server to a managed production URL with OAuth 2.1. No infrastructure to manage.

Which MCP servers exist across your org?

Our registry catalogs every internal and third-party MCP server with ownership, versioning, and approval status.

Who can access which MCP tools?

Our Gateway enforces tool-level RBAC, authentication, and audit logging across every server.

The Platform

Ship MCP servers in seconds. Govern them for the enterprise.

Deploy / Registry / Gateway / Remix

Deploy MCP Servers

Push code to GitHub, get a production MCP server URL in 60 seconds. OAuth 2.1, scaling, and monitoring included.

Learn more

MCP Server Registry

A central catalog of every MCP server in your organization, internal and third-party, with ownership tracking and version control.

Learn more

MCP Gateway & Access Control

Tool-level RBAC, authentication, and audit logs for every MCP server, with a full trail of who can access what.

Learn more

Remix Servers

Combine tools from multiple MCP servers into one governed endpoint. Give each team exactly the capabilities they need.

Learn more

Customer Proof

Teams are already running MCP in production with FastMCP Gateway.

Theory Venturescase-study

Because we've built these bespoke MCP tools with Horizon, I can stay in my LLM chat UI for a lot longer and get the information I need directly without having to tab through all these different places to copy and paste.

Adam Conway

Senior AI Engineer

Enatacase-study

Horizon actually had the best onboarding experience on my team. Even people who have not done tech before were able to onboard onto the tool, which is a very strong sign of ease of use.

Smit Shah

Founder

Nitorum Capitalcase-study

Horizon is the avenue by which we can best deploy MCP within our organization. Out of the box, take my GitHub repo, launch it, and it just works for us.

James Brink

Head Trader

Protocol-Native

One endpoint. Every AI client.

Servers on FastMCP Gateway work with any client that supports the Model Context Protocol. Deploy once, then connect from Claude, Cursor, Windsurf, VS Code, OpenAI, Bedrock, and more.

Claude

Add your hosted servers as custom Connectors in Claude for Work.

Cursor

Connect to your hosted MCP servers from Cursor's AI coding environment.

Windsurf

Use your hosted servers with Windsurf's agentic IDE.

VS Code

Connect GitHub Copilot and other VS Code MCP clients to your hosted servers.

Amazon Bedrock

Integrate your hosted MCP servers with Bedrock agents and internal tools.

OpenAI Agents

Use your hosted servers with OpenAI's agent framework and MCP-compatible tooling.

Any MCP client

Our Gateway implements the MCP spec, so any compliant client works.

Claude Connectors

Claude Connectors powered by FastMCP Gateway.

Anthropic's Claude for Work lets teams add custom Connectors by pasting in a remote MCP server URL. Our Gateway gives you that URL, with OAuth 2.1 and enterprise access controls already handled.

Deploy MCP Servers

Deploy MCP servers with one git push.

Connect your repo and FastMCP Gateway builds, containerizes, and deploys your MCP server to a production URL with OAuth 2.1 auth, autoscaling, and observability configured automatically.

Learn about MCP deployment

MCP Deployment

main

git push

Building

Deploying

Live

https://domain.fastmcp.app

OAuth 2.1

Live with auto-scaling and branch previews

MCP Server Registry

Your organization's MCP server catalog.

See every MCP server across your organization in one place. Track ownership, browse exposed tools and capabilities, manage approved versions, and import third-party servers instead of rebuilding what already exists.

Explore the MCP registry

data1 results

Snowflake

Data warehouse

312

Discover and connect to approved MCP servers across your organization

MCP Gateway & Access Control

MCP authentication, RBAC, and audit trails.

FastMCP Gateway controls access to every MCP server on the platform. Enforce tool-level RBAC, authentication tied to identity, and full audit trails for every access attempt across every server in your organization.

Explore access controls

FastMCP Gateway

ACCESS GRANTED

Identity

Sales Agent

MCP Server

Salesforce CRM

Policy Check Authorized

Fine-grained access control with full audit trail

Remix Servers

Compose the exact MCP server each team needs.

Combine tools from multiple MCP servers into a single governed endpoint. Your engineering team gets GitHub, Jira, and PagerDuty. Your sales team gets Salesforce and HubSpot. No over-provisioning, no context pollution.

Learn about Remix Servers

Remix ServerEngineering Team

GitHub

Jira

PagerDuty

Salesforce

Engineering Remix

IssuesPRsTicketsIncidents

Combine tools from multiple servers into team-specific endpoints

Differentiation

The MCP platform built by the team that built the ecosystem.

No other MCP platform combines open-source framework leadership with full-lifecycle enterprise infrastructure.

Built by the creators of FastMCP

We created the framework behind 70% of MCP servers - we know what breaks at scale.

Full lifecycle, not just one piece

Deploy, catalog, secure, and monitor MCP servers in one platform instead of stitching together point solutions.

Production-grade from day one

OAuth 2.1, RBAC, audit logs, auto-scaling, and monitoring are built in for real production workloads.

Works with the AI clients teams actually use

Any MCP client. Any MCP framework. Claude, Cursor, Windsurf, VS Code, OpenAI, and Bedrock.

Quick Start

Go from code to production in three steps.

FastMCP Gateway gives individual developers a short path from MCP code to a production endpoint, with governance for enterprise teams.

Write your MCP server

Use FastMCP or any MCP framework to define the tools your agents need.

Push to GitHub

Connect your repo to FastMCP Gateway. Every push to main auto-deploys and pull requests get preview environments.

Share the URL

Your server gets a production URL with OAuth 2.1, ready for Claude, Cursor, Windsurf, OpenAI, or any MCP client.

Deploy your first MCP server in 60 seconds.

Free for personal projects. Enterprise governance and RBAC for teams. No credit card required.

Start free Book a demowith our team

MCP gateway and governance for enterprise agents

Give teams a secure way to discover, manage, and control MCP servers without slowing down development.

FastMCP Gateway works with your identity provider.

Access People HR

Apple

AWS Cognito

Breathe HR

CAS SAML

ClassLink

Cloudflare

CyberArk SCIM

Entra ID OIDC

Entra ID SCIM

Fourth

GitLab OAuth

Google OAuth

Google SAML

Intuit OAuth

JumpCloud SCIM

LastPass

Login.gov OpenID Connect

Microsoft OAuth

NetIQ

Okta OIDC

Okta SCIM

OneLogin SCIM

PingFederate SAML

PingOne SAML

Rippling SAML

SailPoint SCIM

Salesforce SAML

Shibboleth Unsolicited SAML

Slack OAuth

Supabase + WorkOS SSO

VMware

Xero OAuth

Okta

Microsoft Entra ID

Google Workspace

Auth0

OneLogin

JumpCloud

Ping Identity

CyberArk

Duo

ADP OpenID Connect

Auth0

BambooHR

Bubble Plugin

Cezanne HR

Clever OIDC

CyberArk SAML

Duo

Entra ID SAML

Firebase

GitHub OAuth

Google Directory Sync

Google OIDC

HiBob

JumpCloud SAML

Keycloak

LinkedIn OAuth

Microsoft AD FS SAML

miniOrange

NextAuth.js

Okta SAML

OneLogin SAML

Oracle SAML

PingFederate SCIM

React Native Expo

Rippling SCIM

Salesforce OAuth

Shibboleth Generic SAML

SimpleSAMLphp

Supabase + AuthKit

Vercel OAuth

Workday

Everything we learned building 70% of MCP servers - yours by default.

From FastMCP code to a live MCP server URL.

Managing MCP servers at scale is the real challenge.

MCP gateway and governance
for enterprise agents