Skip to main content
MCP endpoints can use proxy-backed credentials with use_proxy_secret.
yaml
ports:
  - num: 443
    endpoints:
      - path: /mcp
        mcp:
          label: github
          use_proxy_secret: secret-123
When use_proxy_secret is set, MeshAgent routes MCP requests through /proxy-request and supplies the upstream authorization header from the secret. OAuth credentials are refreshed by the proxy before use when needed. Agents and services using proxy-backed MCP should run as a service account with a runtime scope that includes secrets:proxy.