Skip to content

feat(ai-gateway): MCP Oauth2 token exchange how-to#4850

Open
tomek-labuk wants to merge 16 commits intomainfrom
feat/mcp-token-exchange-main
Open

feat(ai-gateway): MCP Oauth2 token exchange how-to#4850
tomek-labuk wants to merge 16 commits intomainfrom
feat/mcp-token-exchange-main

Conversation

@tomek-labuk
Copy link
Copy Markdown
Contributor

Description

Fixes #4840

Preview Links

Checklist

  • Tested how-to docs. If not, note why here.
  • All pages contain metadata.
  • Any new docs link to existing docs.
  • All autogenerated instructions render correctly (API, decK, Konnect, Kong Manager).
  • Style guide (capitalized gateway entities, placeholder URLs) implemented correctly.
  • Every page has a description entry in frontmatter.
  • Add new pages to the product documentation index (if applicable).

@netlify
Copy link
Copy Markdown

netlify Bot commented Apr 14, 2026

Deploy Preview for kongdeveloper ready!

Name Link
🔨 Latest commit 0342619
🔍 Latest deploy log https://app.netlify.com/projects/kongdeveloper/deploys/69e0b8a2de63910008b5c48e
😎 Deploy Preview https://deploy-preview-4850--kongdeveloper.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@tomek-labuk tomek-labuk marked this pull request as ready for review April 15, 2026 06:01
@tomek-labuk tomek-labuk requested a review from a team as a code owner April 15, 2026 06:01
Copilot AI review requested due to automatic review settings April 15, 2026 06:01
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a new MCP how-to demonstrating OAuth2 token exchange with the AI MCP OAuth2 plugin (Keycloak as IdP) and an upstream MCP server, including supporting prereq includes and entity example YAML.

Changes:

  • Introduces a new how-to for configuring/validating MCP OAuth2 token exchange using Keycloak and a debug upstream MCP server.
  • Adds Keycloak prereq include(s) and new Gateway entity examples (services/routes) to support the how-to’s decK examples.
  • Adds a WeatherAPI prereq include (currently not referenced elsewhere).

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 7 comments.

Show a summary per file
File Description
app/_includes/prereqs/weatherapi.md New prereq snippet for creating/exporting a WeatherAPI key (currently unused).
app/_includes/prereqs/auth/mcp-oauth2/keycloak-token-exchange.md New Keycloak setup include for MCP OAuth2 token exchange (currently unused).
app/_includes/prereqs/auth/mcp-oauth2/keycloak-token-exchange-weather.md Keycloak prereq include for an isolated token-exchange realm/clients used by the new MCP how-to.
app/_how-tos/mcp/configure-mcp-oauth2-token-exchange.md New end-to-end how-to configuring AI MCP Proxy + AI MCP OAuth2 with token exchange and validation steps.
app/_data/entity_examples/gateway/services/mcp-token-exchange-service.yaml Adds a service example for a non-isolated token exchange flow (currently unused).
app/_data/entity_examples/gateway/services/mcp-token-exchange-isolated-service.yaml Adds the service example used by the new isolated token exchange how-to.
app/_data/entity_examples/gateway/routes/mcp-token-exchange.yaml Adds a route example for a non-isolated token exchange flow (currently unused).
app/_data/entity_examples/gateway/routes/mcp-token-exchange-isolated.yaml Adds the route example used by the new isolated token exchange how-to.

Comment thread app/_includes/prereqs/auth/mcp-oauth2/keycloak-token-exchange.md Outdated
Comment thread app/_data/entity_examples/gateway/services/mcp-token-exchange-service.yaml Outdated
Comment thread app/_data/entity_examples/gateway/routes/mcp-token-exchange.yaml Outdated
Comment thread app/_includes/prereqs/auth/mcp-oauth2/keycloak-token-exchange-weather.md Outdated
Comment thread app/_includes/prereqs/auth/mcp-oauth2/keycloak-token-exchange-weather.md Outdated
Comment thread app/_how-tos/mcp/configure-mcp-oauth2-token-exchange.md Outdated
Comment thread app/_includes/prereqs/weatherapi.md
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

How to for MCP Oauth2 MCP token exchange

2 participants