Tenant vs. Personal Level Gateway Configs
Choose Personal or Tenant visibility for an MCP Gateway, and control who can see, use, and edit it.
Every MCP Gateway has one of two visibility levels: Personal or Tenant. This setting controls who can see the Gateway and who can use it. Creating a Personal Gateway needs MCP → Auxiliary Gateways → Manage, which every built-in role holds. Creating, editing, or deleting a Tenant Gateway needs that permission and MCP → Gateway/Toolkit Assignment → Manage, both together. See the permissions reference.
The two models
| Personal | Tenant | |
|---|---|---|
| Who can see it | Only the creator | Everyone in the organization, or only the users and groups you assign |
| Who can use it | Only the creator | Everyone in the organization, or only the users and groups you assign |
| Who can edit or delete it | The creator, with Auxiliary Gateways Manage | Anyone holding both Auxiliary Gateways Manage and Gateway/Toolkit Assignment Manage |
| Who can create one | Anyone with Auxiliary Gateways Manage | Anyone holding both Auxiliary Gateways Manage and Gateway/Toolkit Assignment Manage |
| Can it change levels | Can be promoted to Tenant by anyone holding both permissions above | Cannot be demoted back to Personal |
When to use a Personal Gateway
A Personal Gateway belongs to the user who created it. Only the creator can see it in the Gateway List, connect to it, or edit its configuration. Other users browsing the full Gateway List won't see a Personal Gateway that isn't theirs.
Use a Personal Gateway when you want:
- To test a new server before rolling it out more broadly
- A toolset tailored to your own workflow
- A private Gateway that other users don't need to see
When to use a Tenant Gateway
A Tenant Gateway is shared across your organization. By default every user in the tenant can see it and connect to it as an MCP endpoint, and you can limit it to specific users and groups. Creating, editing, or deleting it needs both permissions listed in the table above; everyone else with access can use it but can't change its configuration.
Use a Tenant Gateway when you want:
- A shared, standardized toolset for a team, such as a support team's tools
- A company-wide set of approved integrations
- One Gateway that admins maintain and the whole organization consumes
Promote a Personal Gateway to Tenant
If a Personal Gateway turns out to be useful for a wider group, anyone holding both permissions above can promote it to Tenant visibility. It is then available to everyone in the organization, or to the users and groups you assign.
Promoting a Gateway to Tenant is permanent. Once a Gateway is Tenant level, it can't be demoted back to Personal. To keep a private version alongside the shared one, create a separate Personal Gateway rather than converting your only copy.
Limit a Tenant Gateway to users and groups
A Tenant Gateway starts out available to everyone in your organization. To give it to specific people instead, assign users or groups to it. Assigning groups lets you manage who has the Gateway through group membership instead of editing the Gateway each time someone joins or leaves.
Go to Secure → Gateway → MCP Gateway and click Configure on the Gateway's card.
Click Settings. Make sure Gateway Visibility is set to Tenant. The User Assignment field appears only for Tenant Gateways.
In User Assignment, select the users and groups who should have this Gateway. You can assign up to 50 users and groups in total. Leave the field empty to keep the Gateway available to all users.
Click Save.
Once saved, only the assigned users and members of the assigned groups see the Gateway and can connect to it. People who manage MCP Gateways in your organization can see and manage it whether or not they are assigned.
Naming rules
Gateway names must be unique across your entire tenant, not just among your own Gateways. If another user has already named their Personal Gateway "Support Tools," you can't reuse that name for a Gateway of your own. If you hit a naming conflict while creating a Gateway, pick a more specific name.
What's the same either way
Visibility level changes who can see and edit a Gateway. It does not change how the Gateway behaves once connected.
Connected app credentials. The apps you connect to a Gateway (Slack, Jira, Google Drive, and so on) carry their own Personal or Tenant designation, separate from the Gateway's visibility setting. A Tenant Gateway doesn't require every connected app to be Tenant level, and a Personal Gateway can still use a Tenant-shared connection. See Tenant vs. Personal Level App Credentials for how that works.
Monitoring and activity. Gateway visibility controls access to the Gateway's configuration, not who can see its usage. Whether a Gateway is Personal or Tenant, its activity is still included in tenant-wide monitoring for admins with that visibility. See MCP Monitoring for who can see what.
Radar and Tool Scanning. Radar and Tool Scanning work the same on both Personal and Tenant Gateways. Neither depends on the visibility level, so you can enable them on either type.