MCP Servers
Protect MCP servers with Teleport's access controls and auditing capabilities
Enroll your first MCP server
Connect an MCP server with the Teleport Application Service, configure and assign a role granting MCP permissions, and connect and query the server with the Teleport CLI or your AI platform of choice.
MCP access controls
Use Teleport's role-based access control (RBAC) system to set up granular permissions for authenticating to MCP servers connected to Teleport.
Troubleshooting
Understand common issues that you might encounter in managing access to MCP servers with Teleport and how to work around or resolve them.
MCP server access
Connect to and query MCP servers with the AI platform of your choice
Enroll a streamable-HTTP MCP server
Enroll an MCP server with streamable-HTTP transport into your Teleport cluster and connect to it through Teleport.
Enroll an stdio MCP server
Enroll an MCP server with stdio transport into your Teleport cluster and connect to it through Teleport.
Enroll an SSE MCP server
Enroll an MCP server with SSE (Server-Sent Events) transport into your Teleport cluster and connect to it through Teleport.
JWT authentication to MCP server
Authenticate Teleport to an MCP server with JWTs signed by Teleport's CA, carrying user identity, roles, and traits.
Dynamic MCP server registration
Register MCP servers (or update existing ones) without having to update the static configuration files read by Teleport Application Service instances.
Access databases over MCP
Configure fine-grained access to a Teleport-protected database for MCP clients such as Claude Desktop or Cursor.
Configure MCP clients
Configure MCP clients such as Claude Desktop or Cursor to access MCP servers.