Guides

Step-by-step guides for the AI Control Plane, from setting up hosted MCP servers to governing the agents that use them with enterprise identity.

Build and host tools

Build the tools behind an MCP server and host them on the platform, from an OAuth-protected API through to a server agents can call.

Build MCP servers with external OAuth

Build OAuth-protected MCP servers with external authentication providers like FusionAuth

Learn more

Govern a third-party MCP server

Put a governed endpoint in front of an MCP server someone else runs, so access control, audit, and upstream credentials apply without changing the upstream.

Learn more

Multi-tenant MCP

Install one governed MCP server per tenant, so each organization, workspace, or region keeps its own credentials, slug, and audit trail.

Learn more

Deployment guides

Deploy the Speakeasy tunnel agent on AWS

Deploy the Speakeasy tunnel agent into an existing AWS account on an EKS node group, an ECS Fargate task, or a Docker-on-EC2 host supervised by systemd, dialing out to the Speakeasy tunnel gateway.

Learn more

Governance

Govern agents once they're connected: identity-backed sessions, per-tool authorization, and audit for every allow-or-deny decision.

Govern agent actions with enterprise identity

Connect an identity provider, scope which MCP servers each role can reach, restrict tool calls by disposition, and audit every allow-or-deny decision.

Learn more

Shadow MCP allow and block lists

Choose a posture for shadow MCP enforcement, build the policy's server list, layer per-server decisions on top, and roll out blocking safely.

Learn more

MCP setup guides

Many hosted MCP servers need something configured in the provider's own console first: an OAuth app, a service account, or an API key. Each guide takes you from that console to a working server in your Speakeasy project.

Asana

Connect an Asana workspace so users can access and manage their permitted Asana work through the hosted Asana MCP server.

Learn more

Atlassian Rovo

Connect Atlassian Rovo so users can access their permitted Jira, Confluence, and Compass work through the hosted MCP server.

Learn more

Box

Connect the Speakeasy AI Control Plane to Box's hosted MCP server with credentials created by a Box Admin or Co-Admin.

Learn more

GitHub

Connect GitHub so users can work with repositories and other resources their GitHub account is permitted to access through GitHub's hosted MCP server.

Learn more