MintMCP gateway
Without a gateway, MCP creates problems:
| Who | Problem |
|---|---|
| Users | Don't know which servers to trust, struggle with STDIO setup, overwhelmed by 100+ tools |
| IT & Security | Credentials scattered across laptops, unvetted servers, no audit logs |
| Developers | OAuth complexity, tool name conflicts, client compatibility issues |
MintMCP solves this by providing a single entrypoint that authenticates users, curates tools, and logs everything.
Example
A "Sales Intelligence" Virtual MCP for account executives. Admins curate connectors for CRM, contracts, and communication. Sales reps connect from ChatGPT or Claude, authenticate once through MintMCP, and the gateway controls which connectors they can reach. All usage is logged.
Architecture
Request flow
- AI client initiates OAuth with MintMCP
- MintMCP validates identity, checks policies, returns available tools
- Client calls a tool → MintMCP routes to the right connector with credentials
- Connector executes, MintMCP logs the call and returns the response
See Core concepts for details.
Components
| Component | What it does |
|---|---|
| AI clients | ChatGPT, Claude, Cursor—initiate OAuth and call tools |
| MintMCP gateway | Authentication, authorization, routing, logging |
| Virtual MCPs | Logical groupings of connectors exposed as single endpoints |
| Connectors | Hosted, remote, or STDIO servers that talk to downstream systems |
| Observability | Dashboards, audit trails, usage analytics |
Governance capabilities
Every request through the gateway is governed:
| Capability | What it does |
|---|---|
| Request logging | Records every tool call with user, timestamp, and payload |
| Access policies | Controls which users can reach which MCP servers |
| Credential management | Stores secrets centrally instead of on user machines |
| SSO integration | Authenticates users through Okta, Google, or Azure AD |
These capabilities mean security teams can approve AI tool deployment with full visibility, and compliance teams get the audit trails they need for SOC 2, HIPAA, and internal reporting.