MCP Servers
How to configure MCP servers for all users or embedded chat users
There are two ways to add MCP Server
- MCP Server for all users (available to all users, shared authentication token)
- MCP Server for embedded chat users (each user has their own authentication token)
MCP Server for embedded chat user
Key Pair Distribution
Two RSA key pairs are required for secure JWT token exchange:
| Key Pair | Purpose | Website | Mitigate AI Platform | MCP Server |
|---|---|---|---|---|
| Signing Key Pair | Ensures token authenticity (RS256) | Private key (signs JWT) | Public key (verifies signature) | Public key (verifies signature) |
| Encryption Key Pair | Protects token confidentiality (RSA-OAEP, A256GCM) | Public key (encrypts JWT) | Private key (decrypts JWT) | - |
Create Workspace and configure key pairs
- Go to Admin → Workspaces
- Click Add Workspace
- Enter Name
- Click Save Workspace
- Click on Configure Embedded Chat and configure key pairs
Create MCP Server for all users
- Go to Admin → MCP Servers
- Click Add MCP Server
- Enter Name, URL and Header (e.g.
Authorization: Bearer secretkey123) - Select Workspaces
- Click Save MCP Server
Create MCP Server for embeded chat users
- Go to Admin → MCP Servers
- Click Add MCP Server
- Enter Name, URL and Header (e.g.
Authorization: Bearer %{jwt_token}) - Select Workspaces
- Click Save MCP Server
The %{jwt_token} placeholder will be replaced by the decrypted JWT token in embedded chat.