Browse Workshops
Step 7

Securing the MCP Bridge

⏱ 1 min

Overview

Your MCP Bridge is now publicly reachable — anyone who knows the endpoint can call your tools. In this step you’ll apply a Client ID Enforcement policy with Basic Authentication to require credentials on every request.

Step 1 — Navigate to the MCP Server instance

  1. Go to MCP Servers
  2. Find and click PhotoMCPServer
  3. Click Instances
  4. Click on the Instance ID to open the instance detail page

Step 2 — Apply the Client ID Enforcement policy

  1. In the instance detail page, click the Policies tab
  2. Click Apply Policy
  3. In the policy list, select Client ID Enforcement
  4. Under Credential origin, select Basic Authentication - Simple

  5. Fill in the credentials:

    Field Value
    User Name mcp-user
    User Password mcp-pass
  6. Click Apply Policy

The policy is pushed to the gateway within 30 seconds. No restart required.

Step 3 — Verify the policy is enforced

Without credentials — reconnect in Postman without setting any auth:

  1. Open your existing MCP Request in Postman
  2. Remove any auth headers, then click Connect
  3. Postman should receive a 401 Unauthorized error and fail to connect

With credentials — add Basic Auth and reconnect:

  1. In the Postman MCP Request, go to the Authorization tab
  2. Set Type to Basic Auth
  3. Enter Username: mcp-user and Password: mcp-pass
  4. Click Connect

You should connect successfully and see both tools in the Tools tab as before. ✓

What you’ve secured

  • Unauthenticated requests return 401 Unauthorized
  • Authenticated requests (Basic Auth) return the tool list

Continue to Summary & Next Steps →