Taming MCP Server Chaos with OAuth, A2A, and One Control Plane

What it does

The MCP Gateway & Registry is a unified control plane that consolidates access to Model Context Protocol (MCP) servers and AI agents. Instead of every developer and autonomous agent maintaining separate connections to individual tools, everything routes through a single gateway backed by Keycloak, Entra ID, or Okta for authentication and audit. It also maintains an agent registry that lets AI agents discover one another for direct peer-to-peer communication using the A2A protocol.

The interesting bit

The platform treats MCP servers and AI agents as first-class citizens under the same governance layer, eliminating the need to maintain separate registries and policies for each. Agents discover each other through the registry but communicate directly without routing through the gateway, which keeps latency low while preserving centralized visibility. The project is also pushing toward Dynamic Client Registration so AI coding assistants like Claude Code or Codex CLI can onboard with a single command.

Key highlights

• Unified registry for MCP servers and AI agents with A2A protocol support
• Enterprise authentication via OAuth 2LO/3LO, Keycloak, Entra ID, and Okta
• Dynamic tool discovery and invocation for autonomous agent workflows
• Native OpenTelemetry observability with Prometheus-compatible /metrics endpoints
• AWS-ready infrastructure with Terraform, ECS Fargate, and DocumentDB support
• Interactive CLI for natural-language tool discovery and cost-tracked AI chat

Caveats

• The one-command AI coding assistant integration via Dynamic Client Registration is marked as “in progress,” though the README notes it has been tested end-to-end with Claude Code and Codex CLI
• Positioned as “enterprise-ready” with 705 stars; the governance surface is broad and some features appear to be evolving quickly

Verdict

Worth evaluating if your organization is already drowning in MCP server configurations and needs unified audit trails for both human developers and autonomous agents. Probably overkill for solo developers running one or two local MCP servers.