Documentation

ModGate docs

Everything you need to deploy, authenticate, and audit MCP servers.

Guides

⚡
QuickstartStart here
Register your first MCP server and start enforcing OAuth 2.1 in under 15 minutes.
→🔐
OAuth 2.1 setup
Full auth flow — PKCE, Dynamic Client Registration, token introspection and revocation.
→🪪
Agent identity
Create named agents with per-tool scope policies, cross-agent delegation, and one-click revocation.
→🛡️
Continuous authorizationNew
Live revocation, admin force-reauth kill switch, reverify windows, and per-agent rate-anomaly detection.
→🔗
WebhooksNew
HMAC-signed real-time events for denials, revocations, force-reauths, and anomalies.
→🤖
Admin MCPNew
Manage your ModGate account from Claude — list agents, revoke access, read your audit log.
→

API endpoints

GET/.well-known/oauth-authorization-server
POST/oauth/register
GET/oauth/authorize
POST/oauth/token
POST/oauth/introspect
POST/oauth/revoke
POST/oauth/delegate
ALL/mcp/{tenantId}/{serverId}/*
GET/agents/{tenantId}
POST/agents/{tenantId}
DELETE/agents/{tenantId}/{agentId}
PATCH/agents/{tenantId}/{agentId}/continuous-auth
POST/agents/{tenantId}/{agentId}/force-reauth
GET/sessions/{tenantId}
POST/webhooks/{tenantId}
GET/webhooks/{tenantId}
DELETE/webhooks/{tenantId}/{webhookId}
GET/webhooks/{tenantId}/{webhookId}/deliveries

Base URL: https://api.modgate.io

Coming soon

⚙️
CLI reference
npx create-mcp-server command reference
🏢
Multi-tenant setup
Isolate customers on SaaS platforms
🛡️
Security best practices
Hardening guide for production deployments
📋
Audit log API
Query, filter, and export agent activity

Something missing? We answer personally.

[email protected] →