1<!DOCTYPE html> 2<html lang="en-US" dir="ltr"> 3 <head> 4 <meta charset="utf-8"> 5 <meta name="viewport" content="width=device-width,initial-scale=1"> 6 <title>Learn â Model Context Protocol for the enterprise · Kravn</title> 7 <meta name="description" content="Plain-language guides to the Model Context Protocol â MCP gateways, security, authentication, governance, and running MCP on-premise."> 8 <meta name="generator" content="VitePress v1.6.4"> 9 <link rel="preload stylesheet" href="/assets/style.NkuM8DKv.css" as="style"> 10 <link rel="preload stylesheet" href="/vp-icons.css" as="style"> 11
11<script type="module" src="/assets/chunks/metadata.b9800205.js"></script>
11 12
12<script type="module" src="/assets/app.CCwuEZpD.js"></script>
12 13 <link rel="preload" href="/assets/inter-roman-latin.Di8DUHzh.woff2" as="font" type="font/woff2" crossorigin=""> 14 <link rel="modulepreload" href="/assets/chunks/theme.m5ABEAnV.js"> 15 <link rel="modulepreload" href="/assets/chunks/framework.tKDuW4U2.js"> 16 <link rel="modulepreload" href="/assets/learn_index.md.DTjsvHOh.lean.js"> 17 <link rel="icon" href="/favicon.svg" type="image/svg+xml"> 18 <link rel="icon" type="image/png" sizes="96x96" href="/favicon-96x96.png"> 19 <link rel="shortcut icon" href="/favicon.ico"> 20 <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"> 21 <meta name="theme-color" content="#0f1115"> 22 <meta name="author" content="AddLayer"> 23 <meta property="og:type" content="website"> 24 <meta property="og:site_name" content="Kravn"> 25 <meta property="og:title" content="Kravn â the enterprise MCP gateway"> 26 <meta property="og:description" content="Self-hostable enterprise MCP gateway: on-prem, SSO/SCIM/RBAC, no data egress â up in one command."> 27 <meta name="twitter:card" content="summary_large_image"> 28 <meta property="og:image" content="https://kravn.ai/og.png?v=2"> 29 <meta name="twitter:image" content="https://kravn.ai/og.png?v=2"> 30
30<script type="application/ld+json">{"@context":"https://schema.org","@type":"SoftwareApplication","name":"Kravn","applicationCategory":"DeveloperApplication","applicationSubCategory":"MCP gateway","operatingSystem":"Docker, Kubernetes, Linux","url":"https://kravn.ai","description":"Kravn â a self-hostable, enterprise MCP gateway, registry and proxy. Bring the Model Context Protocol to your organization on your own infrastructure, integrated with your identity stack (SAML/OIDC/SCIM/RBAC), with no data ever leaving your perimeter.","featureList":["Self-hosted MCP gateway, registry and proxy (Docker / Helm)","No data egress â runs entirely on your infrastructure","Enterprise identity: SAML, OAuth2/OIDC SSO, SCIM 2.0, RBAC, teams","Per-team MCP server and tool entitlements","Governance pipelines: redact secrets/PII, prompt-injection guard, tamper-evident audit","Catalog of 100+ public MCP servers plus native SharePoint, Teams, Jira, Confluence","Boots in one command with a first-run setup wizard; runtime config, no redeploy","KMS/HSM key management, SBOM and signed images"],"author":{"@type":"Organization","name":"AddLayer","url":"https://kravn.ai"},"offers":{"@type":"Offer","price":"0","priceCurrency":"USD"},"license":"https://github.com/addlayerio/kravn/blob/main/LICENSE","sameAs":["https://github.com/addlayerio/kravn"]}</script>
30 31
31<script type="application/ld+json">{"@context":"https://schema.org","@type":"Organization","name":"AddLayer","url":"https://kravn.ai","logo":"https://kravn.ai/logo.svg","description":"AddLayer builds Kravn â a self-hostable, source-available enterprise MCP gateway.","sameAs":["https://github.com/addlayerio","https://github.com/addlayerio/kravn"]}</script>
31 32
32<script type="application/ld+json">{"@context":"https://schema.org","@type":"WebSite","name":"Kravn","url":"https://kravn.ai","publisher":{"@type":"Organization","name":"AddLayer"}}</script>
32 33
33<script id="check-dark-mode">(()=>{const e=localStorage.getItem("vitepress-theme-appearance")||"auto",a=window.matchMedia("(prefers-color-scheme: dark)").matches;(!e||e==="auto"?a:e==="dark")&&document.documentElement.classList.add("dark")})();</script>
33 34
34<script id="check-mac-os">document.documentElement.classList.toggle("mac",/Mac|iPhone|iPod|iPad/i.test(navigator.platform));</script>
34 35 <link rel="canonical" href="https://kravn.ai/learn"> 36 <meta property="og:url" content="https://kravn.ai/learn"> 37 </head> 38 <body> 39 <div id="app"><div class="Layout" data-v-a9a9e638><!--[--><!--]--><!--[--><span tabindex="-1" data-v-492508fc></span><a href="#VPContent" class="VPSkipLink visually-hidden" data-v-492508fc>Skip to content</a><!--]--><!----><header class="VPNav" data-v-a9a9e638 data-v-f1e365da><div class="VPNavBar" data-v-f1e365da data-v-822684d1><div class="wrapper" data-v-822684d1><div class="container" data-v-822684d1><div class="title" data-v-822684d1><div class="VPNavBarTitle has-sidebar" data-v-822684d1 data-v-0f4f798b><a class="title" href="/" data-v-0f4f798b><!--[--><!--]--><!--[--><img class="VPImage logo" src="/logo.svg" alt data-v-35a7d0b8><!--]--><span data-v-0f4f798b>Kravn</span><!--[--><!--]--></a></div></div><div class="content" data-v-822684d1><div class="content-body" data-v-822684d1><!--[--><!--]--><div class="VPNavBarSearch search" data-v-822684d1><!--[--><!----><div id="local-search"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><span class="vp-icon DocSearch-Search-Icon"></span><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"><kbd class="DocSearch-Button-Key"></kbd><kbd class="DocSearch-Button-Key">K</kbd></span></button></div><!--]--></div><nav aria-labelledby="main-nav-aria-label" class="VPNavBarMenu menu" data-v-822684d1 data-v-e6d46098><span id="main-nav-aria-label" class="visually-hidden" data-v-e6d46098> Main Navigation </span><!--[--><!--[--><a class="VPLink link VPNavBarMenuLink" href="/guide/what-is-kravn" tabindex="0" data-v-e6d46098 data-v-956ec74c><!--[--><span data-v-956ec74c>Why Kravn</span><!--]--></a><!--]--><!--[--><a class="VPLink link VPNavBarMenuLink" href="/comparison" tabindex="0" data-v-e6d46098 data-v-956ec74c><!--[--><span data-v-956ec74c>Compare</span><!--]--></a><!--]--><!--[--><a class="VPLink link VPNavBarMenuLink active" href="/learn/" tabindex="0" data-v-e6d46098 data-v-956ec74c><!--[--><span data-v-956ec74c>Learn</span><!--]--></a><!--]--><!--[--><a class="VPLink link VPNavBarMenuLink" href="/integrations" tabindex="0" data-v-e6d46098 data-v-956ec74c><!--[--><span data-v-956ec74c>Integrations</span><!--]--></a><!--]--><!--[--><a class="VPLink link VPNavBarMenuLink" href="/guide/getting-started" tabindex="0" data-v-e6d46098 data-v-956ec74c><!--[--><span data-v-956ec74c>Get Started</span><!--]--></a><!--]--><!--[--><a class="VPLink link VPNavBarMenuLink" href="/guide/installation" tabindex="0" data-v-e6d46098 data-v-956ec74c><!--[--><span data-v-956ec74c>Install</span><!--]--></a><!--]--><!--[--><a class="VPLink link VPNavBarMenuLink" href="/faq" tabindex="0" data-v-e6d46098 data-v-956ec74c><!--[--><span data-v-956ec74c>FAQ</span><!--]--></a><!--]--><!--[--><div class="VPFlyout VPNavBarMenuGroup" data-v-e6d46098 data-v-04f5c5e9><button type="button" class="button" aria-haspopup="true" aria-expanded="false" data-v-04f5c5e9><span class="text" data-v-04f5c5e9><!----><span data-v-04f5c5e9>Docs</span><span class="vpi-chevron-down text-icon" data-v-04f5c5e9></span></span></button><div class="menu" data-v-04f5c5e9><div class="VPMenu" data-v-04f5c5e9 data-v-7dd3104a><div class="items" data-v-7dd3104a><!--[--><!--[--><div class="VPMenuLink" data-v-7dd3104a data-v-acbfed09><a class="VPLink link" href="/guide/concepts" data-v-acbfed09><!--[--><span data-v-acbfed09>Core concepts</span><!--]--></a></div><!--]--><!--[--><div class="VPMenuLink" data-v-7dd3104a data-v-acbfed09><a class="VPLink link" href="/guide/client" data-v-acbfed09><!--[--><span data-v-acbfed09>The governed client</span><!--]--></a></div><!--]--><!--[--><div class="VPMenuLink" data-v-7dd3104a data-v-acbfed09><a class="VPLink link" href="/guide/a2a" data-v-acbfed09><!--[--><span data-v-acbfed09>Agent-to-agent (A2A)</span><!--]--></a></div><!--]--><!--[--><div class="VPMenuLink" data-v-7dd3104a data-v-acbfed09><a class="VPLink link" href="/guide/configuration" data-v-acbfed09><!--[--><span data-v-acbfed09>Configuration</span><!--]--></a></div><!--]--><!--[--><div class="VPMenuLink" data-v-7dd3104a data-v-acbfed09><a class="VPLink link" href="/guide/plugins" data-v-acbfed09><!--[--><span data-v-acbfed09>Plugins & integrations</span><!--]--></a></div><!--]--><!--[--><div class="VPMenuLink" data-v-7dd3104a data-v-acbfed09><a class="VPLink link" href="/guide/security" data-v-acbfed09><!--[--><span data-v-acbfed09>Security & compliance</span><!--]--></a></div><!--]--><!--[--><div class="VPMenuLink" data-v-7dd3104a data-v-acbfed09><a class="VPLink link" href="/guide/key-management" data-v-acbfed09><!--[--><span data-v-acbfed09>Key management (KMS/HSM)</span><!--]--></a></div><!--]--><!--]--></div><!--[--><!--]--></div></div></div><!--]--><!--[--><div class="VPFlyout VPNavBarMenuGroup" data-v-e6d46098 data-v-04f5c5e9><button type="button" class="button" aria-haspopup="true" aria-expanded="false" data-v-04f5c5e9><span class="text" data-v-04f5c5e9><!----><span data-v-04f5c5e9>Resources</span><span class="vpi-chevron-down text-icon" data-v-04f5c5e9></span></span></button><div class="menu" data-v-04f5c5e9><div class="VPMenu" data-v-04f5c5e9 data-v-7dd3104a><div class="items" data-v-7dd3104a><!--[--><!--[--><div class="VPMenuLink" data-v-7dd3104a data-v-acbfed09><a class="VPLink link vp-external-link-icon" href="https://github.com/addlayerio/kravn" target="_blank" rel="noreferrer" data-v-acbfed09><!--[--><span data-v-acbfed09>GitHub</span><!--]--></a></div><!--]--><!--[--><div class="VPMenuLink" data-v-7dd3104a data-v-acbfed09><a class="VPLink link vp-external-link-icon" href="https://github.com/addlayerio/kravn/blob/main/SECURITY.md" target="_blank" rel="noreferrer" data-v-acbfed09><!--[--><span data-v-acbfed09>Changelog (SECURITY.md)</span><!--]--></a></div><!--]--><!--[--><div class="VPMenuLink" data-v-7dd3104a data-v-acbfed09><a class="VPLink link vp-external-link-icon" href="https://github.com/addlayerio/kravn/blob/main/LICENSE" target="_blank" rel="noreferrer" data-v-acbfed09><!--[--><span data-v-acbfed09>License (BSL 1.1)</span><!--]--></a></div><!--]--><!--]--></div><!--[--><!--]--></div></div></div><!--]--><!--]--></nav><!----><div class="VPNavBarAppearance appearance" data-v-822684d1 data-v-af096f4a><button class="VPSwitch VPSwitchAppearance" type="button" role="switch" title aria-checked="false" data-v-af096f4a data-v-e40a8bb6 data-v-4a1c76db><span class="check" data-v-4a1c76db><span class="icon" data-v-4a1c76db><!--[--><span class="vpi-sun sun" data-v-e40a8bb6></span><span class="vpi-moon moon" data-v-e40a8bb6></span><!--]--></span></span></button></div><div class="VPSocialLinks VPNavBarSocialLinks social-links" data-v-822684d1 data-v-164c457f data-v-ee7a9424><!--[--><a class="VPSocialLink no-icon" href="https://github.com/addlayerio/kravn" aria-label="github" target="_blank" rel="noopener" data-v-ee7a9424 data-v-d26d30cb><span class="vpi-social-github"></span></a>
39<!--]--></div><div class="VPFlyout VPNavBarExtra extra" data-v-822684d1 data-v-925effce data-v-04f5c5e9><button type="button" class="button" aria-haspopup="true" aria-expanded="false" aria-label="extra navigation" data-v-04f5c5e9><span class="vpi-more-horizontal icon" data-v-04f5c5e9></span></button><div class="menu" data-v-04f5c5e9><div class="VPMenu" data-v-04f5c5e9 data-v-7dd3104a><!----><!--[--><!--[--><!----><div class="group" data-v-925effce><div class="item appearance" data-v-925effce><p class="label" data-v-925effce>Appearance</p><div class="appearance-action" data-v-925effce><button class="VPSwitch VPSwitchAppearance" type="button" role="switch" title aria-checked="false" data-v-925effce data-v-e40a8bb6 data-v-4a1c76db><span class="check" data-v-4a1c76db><span class="icon" data-v-4a1c76db><!--[--><span class="vpi-sun sun" data-v-e40a8bb6></span><span class="vpi-moon moon" data-v-e40a8bb6></span><!--]--></span></span></button></div></div></div><div class="group" data-v-925effce><div class="item social-links" data-v-925effce><div class="VPSocialLinks social-links-list" data-v-925effce data-v-ee7a9424><!--[--><a class="VPSocialLink no-icon" href="https://github.com/addlayerio/kravn" aria-label="github" target="_blank" rel="noopener" data-v-ee7a9424 data-v-d26d30cb><span class="vpi-social-github"></span></a><!--]--></div></div></div><!--]--><!--]--></div></div></div><!--[--><!--]--><button type="button" class="VPNavBarHamburger hamburger" aria-label="mobile navigation" aria-expanded="false" aria-controls="VPNavScreen" data-v-822684d1 data-v-5dea55bf><span class="container" data-v-5dea55bf><span class="top" data-v-5dea55bf></span><span class="middle" data-v-5dea55bf></span><span class="bottom" data-v-5dea55bf></span></span></button></div></div></div></div><div class="divider" data-v-822684d1><div class="divider-line" data-v-822684d1></div></div></div><!----></header><div class="VPLocalNav has-sidebar empty" data-v-a9a9e638 data-v-070ab83d><div class="container" data-v-070ab83d><button class="menu" aria-expanded="false" aria-controls="VPSidebarNav" data-v-070ab83d><span class="vpi-align-left menu-icon" data-v-070ab83d></span><span class="menu-text" data-v-070ab83d>Menu</span></button><div class="VPLocalNavOutlineDropdown" style="--vp-vh:0px;" data-v-070ab83d data-v-168ddf5d><button data-v-168ddf5d>Return to top</button><!----></div></div></div><aside class="VPSidebar" data-v-a9a9e638 data-v-18756405><div class="curtain" data-v-18756405></div><nav class="nav" id="VPSidebarNav" aria-labelledby="sidebar-aria-label" tabindex="-1" data-v-18756405><span class="visually-hidden" id="sidebar-aria-label" data-v-18756405> Sidebar Navigation </span><!--[--><!--]--><!--[--><div class="no-transition group" data-v-9e426adc><section class="VPSidebarItem level-0" data-v-9e426adc data-v-a4b0d9bf><div class="item" role="button" tabindex="0" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><h2 class="text" data-v-a4b0d9bf>Fundamentals</h2><!----></div><div class="items" data-v-a4b0d9bf><!--[--><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/what-is-model-context-protocol" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>What is MCP?</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/what-is-an-mcp-gateway" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>What is an MCP Gateway?</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-registry" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>What is an MCP Registry?</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-proxy" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>MCP Proxy</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-reverse-proxy" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>MCP Reverse Proxy</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-vs-api-gateway" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>MCP vs API Gateway</p><!--]--></a><!----></div><!----></div><!--]--></div></section></div><div class="no-transition group" data-v-9e426adc><section class="VPSidebarItem level-0" data-v-9e426adc data-v-a4b0d9bf><div class="item" role="button" tabindex="0" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><h2 class="text" data-v-a4b0d9bf>Security & governance</h2><!----></div><div class="items" data-v-a4b0d9bf><!--[--><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-authentication" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>MCP Authentication</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-authorization" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>MCP Authorization</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-security" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>MCP Security</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-governance" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>MCP Governance</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-tool-poisoning" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>Tool Poisoning & Rug-Pull</p><!--]--></a><!----></div><!----></div><!--]--></div></section></div><div class="no-transition group" data-v-9e426adc><section class="VPSidebarItem level-0" data-v-9e426adc data-v-a4b0d9bf><div class="item" role="button" tabindex="0" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><h2 class="text" data-v-a4b0d9bf>Enterprise & operations</h2><!----></div><div class="items" data-v-a4b0d9bf><!--[--><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/enterprise-mcp-architecture" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>Enterprise MCP Architecture</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-for-regulated-industries" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>MCP for Regulated Industries</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-observability" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>MCP Observability & Auditing</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/running-mcp-on-premise" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>Running MCP On-Premise</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/deploying-mcp-in-kubernetes" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>Deploying MCP in Kubernetes</p><!--]--></a><!----></div><!----></div><div class="VPSidebarItem level-1 is-link" data-v-a4b0d9bf><div class="item" data-v-a4b0d9bf><div class="indicator" data-v-a4b0d9bf></div><a class="VPLink link link" href="/learn/mcp-best-practices" data-v-a4b0d9bf><!--[--><p class="text" data-v-a4b0d9bf>MCP Best Practices</p><!--]--></a><!----></div><!----></div><!--]--></div></section></div><!--]--><!--[--><!--]--></nav></aside><div class="VPContent has-sidebar" id="VPContent" data-v-a9a9e638 data-v-91765379><div class="VPDoc has-sidebar has-aside" data-v-91765379 data-v-83890dd9><!--[--><!--]--><div class="container" data-v-83890dd9><div class="aside" data-v-83890dd9><div class="aside-curtain" data-v-83890dd9></div><div class="aside-container" data-v-83890dd9><div class="aside-content" data-v-83890dd9><div class="VPDocAside" data-v-83890dd9 data-v-6d7b3c46><!--[--><!--]--><!--[--><!--]--><nav aria-labelledby="doc-outline-aria-label" class="VPDocAsideOutline" data-v-6d7b3c46 data-v-b38bf2ff><div class="content" data-v-b38bf2ff><div class="outline-marker" data-v-b38bf2ff></div><div aria-level="2" class="outline-title" id="doc-outline-aria-label" role="heading" data-v-b38bf2ff>On this page</div><ul class="VPDocOutlineItem root" data-v-b38bf2ff data-v-3f927ebe><!--[--><!--]--></ul></div></nav><!--[--><!--]--><div class="spacer" data-v-6d7b3c46></div><!--[--><!--]--><!----><!--[--><!--]--><!--[--><!--]--></div></div></div></div><div class="content" data-v-83890dd9><div class="content-container" data-v-83890dd9><!--[--><!--]--><main class="main" data-v-83890dd9><div style="position:relative;" class="vp-doc _learn_" data-v-83890dd9><div>
39<h1 id="learn-the-model-context-protocol-for-the-enterprise" tabindex="-1">Learn: the Model Context Protocol for the enterprise <a class="header-anchor" href="#learn-the-model-context-protocol-for-the-enterprise" aria-label="Permalink to "Learn: the Model Context Protocol for the enterprise"">â</a></h1><p>Clear, vendor-neutral guides to the <strong>Model Context Protocol (MCP)</strong> and what it takes to run it in a real organization â the architecture, the security model, and the operational choices. Start with the fundamentals, then dig into security, governance and deployment.</p><h2 id="fundamentals" tabindex="-1">Fundamentals <a class="header-anchor" href="#fundamentals" aria-label="Permalink to "Fundamentals"">â</a></h2><ul><li><a href="/learn/what-is-model-context-protocol"><strong>What is the Model Context Protocol (MCP)?</strong></a> â the open standard for connecting AI models to tools and data.</li><li><a href="/learn/what-is-an-mcp-gateway"><strong>What is an MCP Gateway?</strong></a> â one governed surface in front of many MCP servers.</li><li><a href="/learn/mcp-registry"><strong>What is an MCP Registry?</strong></a> â cataloguing and curating the tools, resources and prompts you expose.</li><li><a href="/learn/mcp-proxy"><strong>MCP Proxy</strong></a> â how a proxy brokers, secures and observes MCP traffic.</li><li><a href="/learn/mcp-reverse-proxy"><strong>MCP Reverse Proxy</strong></a> â fronting internal MCP servers with a single controlled entry point.</li><li><a href="/learn/mcp-vs-api-gateway"><strong>MCP Gateway vs API Gateway</strong></a> â what's the same, what's different, and why MCP needs its own layer.</li></ul><h2 id="security-governance" tabindex="-1">Security & governance <a class="header-anchor" href="#security-governance" aria-label="Permalink to "Security & governance"">â</a></h2><ul><li><a href="/learn/mcp-authentication"><strong>MCP Authentication</strong></a> â proving <em>who</em> is calling, with SSO, OAuth 2.1 and tokens.</li><li><a href="/learn/mcp-authorization"><strong>MCP Authorization</strong></a> â deciding <em>what</em> each identity may reach, down to the tool.</li><li><a href="/learn/mcp-security"><strong>MCP Security</strong></a> â the threat model and the controls that address it.</li><li><a href="/learn/mcp-governance"><strong>MCP Governance</strong></a> â policy, redaction, approvals and a tamper-evident audit trail.</li><li><a href="/learn/mcp-tool-poisoning"><strong>MCP Tool Poisoning & Rug-Pull Attacks</strong></a> â how malicious tool definitions attack agents, and how to defend.</li></ul><h2 id="enterprise-operations" tabindex="-1">Enterprise & operations <a class="header-anchor" href="#enterprise-operations" aria-label="Permalink to "Enterprise & operations"">â</a></h2><ul><li><a href="/learn/enterprise-mcp-architecture"><strong>Enterprise MCP Architecture</strong></a> â a reference architecture for MCP at scale.</li><li><a href="/learn/mcp-for-regulated-industries"><strong>MCP for Regulated Industries</strong></a> â adopting MCP under banking, healthcare and public-sector constraints.</li><li><a href="/learn/mcp-observability"><strong>MCP Observability & Auditing</strong></a> â tracing, metrics and audit for every MCP call.</li><li><a href="/learn/running-mcp-on-premise"><strong>Running MCP On-Premise</strong></a> â keeping prompts, context and data inside your perimeter.</li><li><a href="/learn/deploying-mcp-in-kubernetes"><strong>Deploying MCP in Kubernetes</strong></a> â running an MCP gateway on your own cluster.</li><li><a href="/learn/mcp-best-practices"><strong>MCP Best Practices</strong></a> â a practical checklist for adopting MCP safely.</li></ul><hr><p>Building this in your own organization? <a href="/">Kravn</a> is a self-hostable MCP gateway, registry and proxy that puts these ideas into practice â on your infrastructure, plugged into your identity stack, with nothing leaving your perimeter. <a href="/guide/getting-started">Get started</a> or <a href="/comparison">see how it compares</a>.</p></div></div></main><footer class="VPDocFooter" data-v-83890dd9 data-v-4f9813fa><!--[--><!--]--><div class="edit-info" data-v-4f9813fa><div class="edit-link" data-v-4f9813fa><a class="VPLink link vp-external-link-icon no-icon edit-link-button" href="https://github.com/addlayerio/kravn/edit/main/apps/website/learn/index.md" target="_blank" rel="noreferrer" data-v-4f9813fa><!--[--><span class="vpi-square-pen edit-link-icon" data-v-4f9813fa></span> Edit this page on GitHub<!--]--></a></div><div class="last-updated" data-v-4f9813fa><p class="VPLastUpdated" data-v-4f9813fa data-v-475f71b8>Last updated: <time datetime="2026-07-18T13:35:43.000Z" data-v-475f71b8></time></p></div></div><nav class="prev-next" aria-labelledby="doc-footer-aria-label" data-v-4f9813fa><span class="visually-hidden" id="doc-footer-aria-label" data-v-4f9813fa>Pager</span><div class="pager" data-v-4f9813fa><!----></div><div class="pager" data-v-4f9813fa><a class="VPLink link pager-link next" href="/learn/what-is-model-context-protocol" data-v-4f9813fa><!--[--><span class="desc" data-v-4f9813fa>Next page</span><span class="title" data-v-4f9813fa>What is MCP?</span><!--]--></a></div></nav></footer><!--[--><!--]--></div></div></div><!--[--><!--]--></div></div><footer class="VPFooter has-sidebar" data-v-a9a9e638 data-v-c970a860><div class="container" data-v-c970a860><p class="message" data-v-c970a860>Source-available under the Business Source License 1.1 (converts to Apache 2.0). Built by AddLayer. · <a href="https://buymeacoffee.com/kravn" class="coffee-link">â Buy me a coffee</a></p><p class="copyright" data-v-c970a860>© 2026 AddLayer</p></div></footer><!--[--><!--]--></div></div> 40 41 42
42<script type="module" src="https://static.cloudflareinsights.com/beacon.min.js/v31edd6df95cf4e85bb4c19e7a9bdbcba1788362987495" integrity="sha512-iIg7k2xntmwu6/uSb5tpc/hySgZc4eoL31yB29W6tJFo2akwjPWcEqnCEdJvGexCL0KEQwVYv5BlowfhVz26hg==" data-cf-beacon='{"version":"2024.11.0","token":"21ef1756069e40c1b49b7dac4a01b2db","r":1,"spa":2}' crossorigin="anonymous"></script>
42 43</body> 44</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.