広告掲載
MCP.so
ログイン

How does it work MCP Server

@pomerium

リポジトリ

基本情報

カテゴリ

その他

ライセンス

NOASSERTION

トランスポート

stdio

作者

pomerium

How does it work MCP Server について

Demo application showcasing how to build and secure MCP servers and clients with Pomerium using contextual access policies.

#mcp#zerotrust#agentic-ai

How does it work MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mcp-app-demo": {
      "command": "docker",
      "args": [
        "compose",
        "up",
        "-d"
      ]
    }
  }
}

How does it work MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is How does it work?

Pomerium Chat is a minimal chat application that demonstrates how to secure remote Model Context Protocol (MCP) servers with Pomerium. It integrates MCP clients (like Claude.ai or OpenAI) with internal MCP servers behind Pomerium’s authentication and authorization gateway, and is intended for developers building agentic frameworks or internal apps that invoke MCP servers.

How to use How does it work?

Set up the required environment variables in .env-mcp-app-demo (an OpenAI API key), configure Pomerium routes in pomerium-config.yaml with your domain, and run docker compose up -d. The demo includes a SQLite MCP server. After signing in at https://mcp-app-demo.YOUR-DOMAIN/, you can query the database via natural language.

Key features of How does it work

  • Secures local HTTP MCP servers with Pomerium’s OAuth 2.1 gateway
  • Supports upstream OAuth flows for services like GitHub or Google Drive
  • External clients never see upstream OAuth tokens (TI)
  • MCP servers can remain stateless and token‑free
  • Provides an endpoint to list available MCP servers and their connection status
  • Allows redirecting users to complete upstream OAuth authentication

Use cases of How does it work

  • Exposing an internal database MCP server to remote MCP clients like Claude.ai
  • Building internal applications that call MCP servers via LLM APIs (OpenAI, Claude)
  • Secure proxying of MCP requests that require upstream OAuth tokens

よくある質問

1

What are the prerequisites for running the demo?

You need a Linux or macOS host, Docker and Docker Compose, port 443 exposed to the internet for Let’s Encrypt TLS, and an OpenAI API key.

2

How does Pomerium handle authentication for MCP servers?

Pomerium sits between MCP clients and servers, managing sign‑in via its own interface. It issues an External Token (TE) to the client and, if needed, obtains an Internal Token (TI) from an upstream OAuth provider – the client never sees TI.

3

What is the difference between External Token (TE) and Internal Token (TI)?

TE is an externally‑facing token from Pomerium used by clients to authenticate requests to MCP servers. TI is an internal token that Pomerium obtains from an upstream OAuth provider and passes to the MCP server when proxying requests.

4

How do I make an MCP server accessible to an external client?

Configure a Pomerium route with the `mcp` property (e.g., `mcp: server: {}`) pointing to the internal MCP server. Pomerium then handles authentication and authorization for all incoming requests.

5

How can my own application obtain an External Token for an MCP server?

Enable `mcp.pass_upstream_access_token` on your app’s route. Pomerium will supply the backend with an Authorization header containing the External Token, which can then be forwarded to LLM APIs or agentic frameworks.

コメント

「その他」の他のコンテンツ

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K

Blender

ahujasid

Open-source MCP to use Blender with any LLM

23.6K

The Living Bread

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w

Screenpipe

screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context

22.0K
広告掲載