Core Concepts

MCP Gateway

MCP Gateway puts BLAZLE in front of your own MCP servers: a database tool, an internal API, a deploy server. Agents connect to BLAZLE instead of the server, and every tool call passes through the same checks as the rest of BLAZLE before it reaches your server. You decide per tool whether it runs, waits for a person, or never runs, and one switch cuts an agent off from a server immediately.

How a call is handled

The agent authenticates with a BLAZLE MCP token. API keys are refused.
If the server is switched off, every call is refused.
The tool's decision is applied: Allow, Approve (one person), Four-eyes (two people) or Block. Tools without their own decision use the server default, which is Approve.
A read-only token can only call tools set to Allow.
The arguments are checked by your interceptor rules, as a tool call. A blocked call never reaches your server and appears under Blocks.
The call counts toward your monthly intercept quota.
Allowed calls are forwarded. Approve and Four-eyes calls wait in Copilot Approvals and run once approved; the agent gets a pending result with the approval id.
What your server returns is checked by the output guard: secrets are masked and the result is marked as untrusted content.

Blocked tools are hidden from tools/list. Every call is recorded as usage of the token, so Agent Sweep sees which agents use which servers.

Connect a server

In Dashboard → MCP Gateway, add a name, the server's Streamable HTTP URL and, if it needs one, the header it expects (for example Authorization: Bearer ...). The credential is encrypted and never shown again. Then point the agent at the gateway:

{
  "mcpServers": {
    "warehouse": {
      "type": "http",
      "url": "https://api.blazle.io/api/v1/mcp/gateway/warehouse",
      "headers": { "Authorization": "Bearer mcp_..." }
    }
  }
}

Private and internal addresses are refused on BLAZLE Cloud. On a self-hosted install inside your network, set MCP_GATEWAY_ALLOW_PRIVATE=true to reach internal servers.

Plans

Business connects up to 3 servers. Enterprise is unlimited. Gateway calls count toward the intercept quota of your plan.

API

POST   /api/v1/mcp/gateway/{name}          # MCP endpoint for agents
GET    /api/v1/mcp/upstreams
POST   /api/v1/mcp/upstreams                {"name","url","auth_header_name","auth_value","default_action"}
PATCH  /api/v1/mcp/upstreams/{id}           {"enabled": false} | {"tool_policies": {"drop_table": "block"}}
DELETE /api/v1/mcp/upstreams/{id}
POST   /api/v1/mcp/upstreams/{id}/tools     # lists the server's tools with their decision

All docs