Runtime
Hosted MCP endpoint
Learn what a hosted MCP endpoint is, how HTTP JSON-RPC works, and how Astrail secures generated MCP servers for agents.
Definition
A hosted MCP endpoint is a network-accessible MCP server URL that clients call over HTTP. It lets agents connect to tools without installing a local server process on the user's machine.
How Astrail Uses It
Astrail hosts generated MCP endpoints at server-specific URLs. Each endpoint handles JSON-RPC methods, filters public and private tools, applies rate limits, validates inputs, and dispatches safe calls to upstream APIs or website reads.
Implementation Checklist
Require authorization for private servers and sensitive operations.
Return clear errors for unauthenticated or unauthorized calls.
Apply body-size, per-route, per-identity, and abuse limits.
Expose only intended tools through metadata and tools/list.
FAQ
Do hosted MCP endpoints replace local stdio servers?
No. They are a deployment choice. Hosted HTTP endpoints are better for managed services, auth, shared infrastructure, and server-side execution. stdio remains useful for local tools.
Can a hosted MCP endpoint be public?
Yes, but public endpoints should expose only non-sensitive tools and should still enforce validation, rate limits, and network safety boundaries.