Secure Remote MCP Servers using Azure API Management

Name: Secure Remote MCP Servers using Azure API Management
Author: Azure-Samples

@Azure-Samples

代码仓库

关于 Secure Remote MCP Servers using Azure API Management

Azure API Management as AI Gateway to Remote MCP servers.

基本信息

分类

开发工具

许可证

MIT

运行时

bicep

传输方式

stdio

发布者

Azure-Samples

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "remote-mcp-apim-functions-python": {
      "command": "npx",
      "args": [
        "@modelcontextprotocol/inspector"
      ]
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Secure Remote MCP Servers using Azure API Management?

This is an experimental sample that uses Azure API Management as an AI Gateway for MCP (Model Context Protocol) servers. It implements the latest MCP Authorization specification, deploying a secure multi-layered MCP server infrastructure on Azure with authentication, authorization, and request routing managed through Azure API Management.

How to use Secure Remote MCP Servers using Azure API Management?

Deploy the infrastructure using the azd up command after registering the Microsoft.App resource provider. Then connect an MCP client (e.g., MCP Inspector) using SSE transport to the API Management SSE endpoint displayed after deployment.

Key features of Secure Remote MCP Servers using Azure API Management

OAuth 2.0/PKCE authentication flow per MCP specification
Encrypted session keys for secure API access
Multi-layer security with API Management, Functions, and managed identities
Serverless compute using Azure Functions (Python 3.11)
Optional VNet integration for network isolation
Centralized policy management for rate limiting and throttling

Use cases of Secure Remote MCP Servers using Azure API Management

Hosting secure MCP servers with OAuth-protected tool access
Implementing an enterprise-grade AI Gateway for MCP clients
Enabling third-party authorization flows for MCP tools
Deploying a reference architecture for remote MCP servers on Azure

FAQ from Secure Remote MCP Servers using Azure API Management

What runtime does the MCP server use?

The MCP server runs on Azure Functions with Python 3.11 on the Flex Consumption plan.

What transport protocol does the MCP server use?

The MCP server uses Server-Sent Events (SSE) transport, with the endpoint at /mcp/sse.

How is authentication handled?

Authentication follows the MCP Authorization specification using OAuth 2.0 with PKCE, integrated with Entra ID (Azure Active Directory). Session keys are encrypted and stored in API Management cache.

What is the role of Azure API Management?

API Management acts as the central security gateway, handling OAuth flows, request validation, header injection, and secure proxying to the backend Azure Function.