Remote MCP Connector Documentation

ThumbGate provides secure, direct remote Model Context Protocol (MCP) connectivity for autonomous AI agents, enterprise IDEs, and agentic workflows.

Connector Endpoint & Connection URL

Connect your MCP-compliant client or agent harness to the canonical endpoint at /mcp:

https://thumbgate-production.up.railway.app/mcp

Authentication & OAuth 2.1 PKCE Flow

Remote connections require authentication via OAuth 2.1 PKCE (Proof Key for Code Exchange) to ensure state-integrity and prevent authorization-code interception attacks. Interactive sessions redirect to authorize scopes before materializing transient bearer tokens.

Reviewer Credential Policy

For automated evaluation, security audits, and zero-trust verification loops, ThumbGate provides a read-only reviewer credential. The reviewer credential permits diagnostic evaluation (SELECT, DESCRIBE, gate telemetry readout) without granting mutation or admin access.