Skip to content

docs: Add deployment guidelines for proxying MCP servers#2528

Open
jeffyaw wants to merge 1 commit into
modelcontextprotocol:mainfrom
jeffyaw:docs/remote-deployment-guidelines
Open

docs: Add deployment guidelines for proxying MCP servers#2528
jeffyaw wants to merge 1 commit into
modelcontextprotocol:mainfrom
jeffyaw:docs/remote-deployment-guidelines

Conversation

@jeffyaw

@jeffyaw jeffyaw commented Apr 6, 2026

Copy link
Copy Markdown

Split from #2521 per feedback from @localden. This PR adds operational guidance for deploying MCP servers behind reverse proxies and API gateways.

Covers:

  • SSE buffering configuration (nginx, Caddy)
  • Connection timeout recommendations
  • Required header forwarding (Mcp-Session-Id, Mcp-Protocol-Version, Authorization, Accept, Last-Event-ID)
  • SSRF protection for user-configured backend URLs
  • Payload logging guidance

This is a standalone docs article with practical configuration examples. No spec changes.

@jeffyaw jeffyaw requested review from a team as code owners April 6, 2026 18:06
@github-actions github-actions Bot added the documentation Improvements or additions to documentation label Apr 6, 2026
@jeffyaw jeffyaw force-pushed the docs/remote-deployment-guidelines branch from c97eea0 to a17b607 Compare April 6, 2026 18:22
founder-OmniPA added a commit to founder-OmniPA/modelcontextprotocol that referenced this pull request May 23, 2026
Closes modelcontextprotocol#2528

Covers the proxy-specific config changes needed for production MCP deployments: required header forwarding (Mcp-Session-Id, Mcp-Protocol-Version, Authorization, Last-Event-ID), SSE buffering disabled, session affinity, connection timeouts, SSRF protection for user-supplied backend URLs, payload logging guidance, and TLS end-to-end recommendations.

Includes config examples for nginx, Caddy, Traefik, AWS ALB, and Cloudflare, plus a summary checklist.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant