diff --git a/docs/pages/enroll-resources/mcp-access/reference.mdx b/docs/pages/enroll-resources/mcp-access/reference.mdx index 8f3c28f5ff1..134b417366b 100644 --- a/docs/pages/enroll-resources/mcp-access/reference.mdx +++ b/docs/pages/enroll-resources/mcp-access/reference.mdx @@ -37,6 +37,8 @@ app_service: # Use "mcp+http://" and "mcp+https://" as scheme for streamable HTTP MCP servers. # Use "mcp+sse+http://" and "mcp+sse+https://" as scheme for SSE MCP servers. # Leave it empty or use "mcp+stdio://" for stdio MCP servers. + # For streamable HTTP MCP servers, the path in the URI is used when the MCP + # client requests "/" but is not appended to requests for other paths. uri: "mcp+http://localhost:12345/mcp" # Free-form application description. description: "Example Everything MCP server" @@ -95,6 +97,8 @@ spec: # Use "mcp+http://" and "mcp+https://" as scheme for streamable HTTP MCP servers. # Use "mcp+sse+http://" and "mcp+sse+https://" as scheme for SSE MCP servers. # Leave it empty or use "mcp+stdio://" for stdio MCP servers. + # For streamable HTTP MCP servers, the path in the URI is used when the MCP + # client requests "/" but is not appended to requests for other paths. uri: "mcp+http://localhost:12345/mcp" mcp: diff --git a/docs/pages/includes/mcp-access/configure-app-service.mdx b/docs/pages/includes/mcp-access/configure-app-service.mdx index 555b6786461..36c98733db7 100644 --- a/docs/pages/includes/mcp-access/configure-app-service.mdx +++ b/docs/pages/includes/mcp-access/configure-app-service.mdx @@ -73,3 +73,5 @@ server you desire to run. + +(!docs/pages/includes/mcp-access/endpoint-path-note.mdx!) diff --git a/docs/pages/includes/mcp-access/endpoint-path-note.mdx b/docs/pages/includes/mcp-access/endpoint-path-note.mdx new file mode 100644 index 00000000000..deed5695af9 --- /dev/null +++ b/docs/pages/includes/mcp-access/endpoint-path-note.mdx @@ -0,0 +1,3 @@ + +If the MCP endpoint includes a path such as `/mcp` or `/sse`, it can be included in the `uri`. For streamable-HTTP servers, Teleport uses the path in `uri` when an MCP client requests `/`. When the client requests a different path, Teleport forwards the request to that path instead of appending it to the path in `uri`. For example, if `uri` is `mcp+https://localhost:3000/mcp` and the MCP client requests `/.well-known/oauth-authorization-server`, Teleport forwards the request to `/.well-known/oauth-authorization-server`, not `/mcp/.well-known/oauth-authorization-server`. + diff --git a/docs/pages/includes/mcp-access/integration-teleport-app-rewrite.mdx b/docs/pages/includes/mcp-access/integration-teleport-app-rewrite.mdx index dd10699fd03..7d974ae25e1 100644 --- a/docs/pages/includes/mcp-access/integration-teleport-app-rewrite.mdx +++ b/docs/pages/includes/mcp-access/integration-teleport-app-rewrite.mdx @@ -80,4 +80,6 @@ $ terraform apply ``` - \ No newline at end of file + + +(!docs/pages/includes/mcp-access/endpoint-path-note.mdx!) diff --git a/docs/pages/includes/mcp-access/integration-teleport-app.mdx b/docs/pages/includes/mcp-access/integration-teleport-app.mdx index e943da1eadc..27c99390784 100644 --- a/docs/pages/includes/mcp-access/integration-teleport-app.mdx +++ b/docs/pages/includes/mcp-access/integration-teleport-app.mdx @@ -68,3 +68,5 @@ $ terraform apply + +(!docs/pages/includes/mcp-access/endpoint-path-note.mdx!)