Browse documentation

MCP Servers

Configure Model Context Protocol servers in nRouter. Connect upstream tools through a secured reverse proxy with zero-credit proxying and client config exports.

The Model Context Protocol (MCP) is an open standard enabling models and agents to access external tools, databases, and resources. nRouter provides a secure MCP Gateway reverse proxy between AI clients and your private upstream tool servers.

MCP Hub — connect and manage your organization's Model Context Protocol servers

Architecture & Integration

Proxies tool traffic at https://api.nrouter.ai/mcp/{server_name} with Streamable HTTP (streamable_http):

  • Zero-Credit Proxying: Calls consume zero generation tokens and place no credit holds; usage adheres to key rate limits (RPM) and budget ceilings.
  • SSRF & Security: Requires https://; blocks loopback, metadata, and private subnets. Upstream secrets remain encrypted at rest and masked in UI (•••7890).
  • Dashboard Hubs: Manage connections in MCP Hub (/[organization]/mcp-hub, Owner/Admin write access) and browse tools in Tools Hub (/[organization]/tools-hub). MCP proxy calls consume no model tokens and rate limits are managed in the dashboard (Pay as you go: 1 server; existing: 10; Enterprise: 1,000). See API Key Management, Dashboard, and Guardrails.

Export configuration into claude_desktop_config.json, ~/.claude.json, or .cursor/mcp.json:

{
  "mcpServers": {
    "linear": {
      "url": "https://api.nrouter.ai/mcp/linear",
      "headers": { "Authorization": "Bearer sk-nrouter-xxxxxxxxxxxx" }
    }
  }
}

Tools can also be called programmatically via the nRouter SDK.

Frequently asked questions

Does MCP traffic cost credits?

No; tool execution consumes no generation tokens and places no credit holds, adhering instead to key rate limits and budgets.

How many MCP servers can I register?

Pay as you go includes 1 server, existing subscriber plans carry 10, and Enterprise allows up to 1,000. MCP proxy calls consume no model tokens and rate limits are managed in the dashboard.

Are my upstream credentials safe?

Yes; secrets are encrypted at rest, masked in the dashboard, stripped before dispatch, and protected by strict SSRF blocklists.

Which clients can connect through the gateway?

Any client supporting Streamable HTTP, including Claude Desktop, Claude Code, and Cursor, using your virtual key as bearer token.

Was this page helpful?