MCP Servers

Key Features

MCP Server Details

Each server in the list displays:

• Name -- the server name.
• Component count -- how many components the server exposes as MCP tools.
• Workflow count -- how many workflows are associated with the server.
• Tags -- assigned tags shown as badges.
• Enabled/Disabled status -- whether the server is currently active.
• Last modified date -- when the server was last updated.

How to Use

Creating an MCP Server

1. Click the New MCP Server button in the top-right corner.
2. Provide a Name for the server.
3. Optionally toggle Require authentication (on by default for a new server) and Enforce tool authorization. The second depends on the first: turning Require authentication off disables Enforce tool authorization and clears it, because there is no caller identity to authorize against.
4. Click Save to create the server.

The server is created empty — you add the components and workflows it exposes from the server row afterward (see below). Assign tags inline on the server row once it exists.

Adding components and workflows to a server

Open the server row's ellipsis (⋮) menu:

• Add Component -- opens a two-step dialog: Select Component (pick the third-party component) then Select Tools from <component> (choose which of its actions are exposed as tools, and configure each tool's parameters).
• Add Workflows -- pick an integration instance configuration, then the workflows within it to expose. Only workflows carrying a New Workflow Call trigger are eligible; a configuration with none shows "No tool-eligible workflows found".

For each exposed component action, you choose which parameters you fix yourself and which the connected agent fills at call time, using the fromAi(...) expression — the same mechanism as attaching tools to an AI Agent. See Supplying tool parameters with fromAi for the syntax.

Managing MCP Servers

Each server row has an Enabled switch and an ellipsis (⋮) menu:

• Enable/Disable -- flip the switch on the row to control availability.
• Edit -- update the server name and authentication toggles.
• Delete -- remove the server (confirmed via an alert dialog).

Tags are edited inline on the server row.

Filtering MCP Servers

Use the left sidebar to filter the server list:

• Components -- select a component name to show only servers that expose that component.
• Integrations -- filter by integration.
• Tags -- click a tag to filter by that tag.

Environment Selection

Use the environment selector at the top of the page (or the global one in the left sidebar) to switch between environments. MCP server configurations are scoped per environment.

Connecting to a server

Each server is reachable at /api/embedded/{secretKey}/mcp. A request selects the environment with the X-Environment header; the tools it sees are scoped to that environment.

Authentication

The Require authentication toggle (set when creating or editing the server) controls what a request must present:

• On (the default for newly created servers) — the request's Authorization header must carry one of:

  • A ByteChef-signed JWT minted with the tenant's signing key. The JWT's kid header identifies the tenant and its sub claim carries the external user id.
  • A JWT issued by the tenant's configured external identity provider, via OAuth2 federation.

  Either credential resolves the caller to a ConnectedUser.

• Off — the endpoint serves the request using the URL secret alone. No credential is required and no ConnectedUser is resolved, so a tool that needs a connection returns a setup URL instead of executing.

Servers created before this setting existed default to off, so they keep working unchanged.

Tenant scoping

A session only exposes the tenant's own workflows, connections, and execution history.