Features

1 min read

Capabilities

Capability

What it delivers

Status

Relay and gateway

One MCP endpoint per virtual server routes traffic to approved downstream systems.

Available

Virtual servers

Curated, role-based MCP endpoints with full draft, publish, and unpublish lifecycle.

Available

Tool curation

Admins choose exactly which tools are exposed, with clear namespacing across origins.

Available

Tools, resources, and prompts

The hub aggregates downstream tools, MCP resources, and prompts behind one endpoint.

Available

Standards-based OAuth

PKCE, dynamic client registration, refresh, and discovery work with any MCP client.

Available

Per-user downstream OAuth

Each user authenticates to downstream systems individually; credentials stay in the hub.

Available

Tool elicitation

Tools that need a human in the loop can request confirmation through any MCP client.

Available

Tool-call audit trail

Tool-call activity is recorded for administrative review.

Available

Delegated MCP server administration

Tenant MCP admins can assign specific users to manage individual origin MCP servers without granting tenant-wide connector admin access.

Available

Space restrictions for MCP servers

Admins can limit an origin MCP server to selected Spaces/Assistants.

Available

DLP and anonymization

Inspect and clean sensitive data before it reaches downstream systems.

Roadmap

Unique tools as MCP origins

Expose Unique capabilities such as search, web search, SWOT, and sub-agents through virtual servers.

Roadmap

MCP UI passthrough

Forward rich cards and interactive components from downstream servers to capable clients.

Roadmap

Feature Groups

Connectivity

Identity and credentials

Governance

One MCP endpoint per virtual server, multi-origin routing, namespaced tools, and resource and prompt passthrough.

Standards-based OAuth, per-user downstream authentication, and centralized credential storage.

Curated tool sets, publish and unpublish lifecycle, tool-call audit trail, feature-flagged delegated connector administration, and selected-space restrictions.

Last updated