Execution Flow
- Outbound Connection: The gateway establishes a connection to your specified MCP servers (Streamable HTTP with SSE fallback).
- Tool Discovery: The gateway queries
listToolson the remote server and filters tools based onallowed_toolsif provided. - Tool Namespacing: Remote tools are injected into the model schema using the
server__tool_nameformat. - Agentic Loop: When the model invokes a remote tool, the gateway executes the call against the remote server, formats the result, and continues the conversation until a final response is generated.
Payload Specification Formats
Neosantara supports two MCP server specification formats:Security & Constraints
- Mandatory HTTPS: Remote MCP servers must use
https://. Requests usinghttp://fail with aninvalid_mcp_urlerror. - SSRF Guard: The gateway blocks
localhost, cloud metadata addresses (169.254.169.254), and private RFC 1918 subnets (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16). - Server Limit: Up to 8 remote MCP servers per request.
- Connection Timeout: 15 seconds per remote server.