# MCP Servers

## Enroll your first MCP server

Connect an MCP server with the Teleport Application Service, configure and assign a role granting MCP permissions, and connect and query the server with the Teleport CLI or your AI platform of choice.

[Get started with MCP servers](https://goteleport.com/docs/enroll-resources/mcp-access/getting-started.md)

[Enroll your first MCP server](https://www.youtube.com/embed/JdiNX4pIUaU)

#### [MCP access controls](https://goteleport.com/docs/rbac)

Use Teleport's role-based access control (RBAC) system to set up granular permissions for authenticating to MCP servers connected to Teleport.

#### [Troubleshooting](https://goteleport.com/docs/troubleshooting)

Understand common issues that you might encounter in managing access to MCP servers with Teleport and how to work around or resolve them.

### MCP server access

Connect to and query MCP servers with the AI platform of your choice

- #### [Enroll a streamable-HTTP MCP server](https://goteleport.com/docs/enroll-resources/mcp-access/enrolling-mcp-servers/streamable-http.md)

  Enroll an MCP server with streamable-HTTP transport into your Teleport cluster and connect to it through Teleport.

- #### [Enroll an stdio MCP server](https://goteleport.com/docs/enroll-resources/mcp-access/enrolling-mcp-servers/stdio.md)

  Enroll an MCP server with stdio transport into your Teleport cluster and connect to it through Teleport.

- #### [Enroll an SSE MCP server](https://goteleport.com/docs/enroll-resources/mcp-access/enrolling-mcp-servers/sse.md)

  Enroll an MCP server with SSE (Server-Sent Events) transport into your Teleport cluster and connect to it through Teleport.

- #### [JWT authentication to MCP server](https://goteleport.com/docs/enroll-resources/mcp-access/jwt.md)

  Authenticate Teleport to an MCP server with JWTs signed by Teleport's CA, carrying user identity, roles, and traits.

- #### [Dynamic MCP server registration](https://goteleport.com/docs/enroll-resources/mcp-access/dynamic-registration.md)

  Register MCP servers (or update existing ones) without having to update the static configuration files read by Teleport Application Service instances.

- #### [Configure MCP clients](https://goteleport.com/docs/connect-your-client/model-context-protocol/mcp-access.md)

  Configure MCP clients such as Claude Desktop or Cursor to access MCP servers.

### Integrate MCP with your services

#### [Databases](https://goteleport.com/docs/connect-your-client/model-context-protocol/database-access.md)

Connect Teleport databases over MCP

#### [Kubernetes Clusters](https://goteleport.com/docs/connect-your-client/model-context-protocol/kube-access.md)

Connect Teleport Kubernetes Clusters over MCP

#### [Amazon Bedrock AgentCore Gateway](https://goteleport.com/docs/enroll-resources/mcp-access/integration-guides/aws-bedrock-gateway.md)

Connect Amazon Bedrock AgentCore Gateway

#### [GitHub](https://goteleport.com/docs/enroll-resources/mcp-access/integration-guides/github.md)

Connect GitHub over MCP

#### [Grafana](https://goteleport.com/docs/enroll-resources/mcp-access/integration-guides/grafana.md)

Connect Grafana over MCP

#### [Hashicorp Vault](https://goteleport.com/docs/enroll-resources/mcp-access/integration-guides/vault.md)

Connect Hashicorp Vault over MCP

#### [Notion](https://goteleport.com/docs/enroll-resources/mcp-access/integration-guides/notion.md)

Connect Notion over MCP