Skip to main content
Version: 0.1.0

CortexHub MCP Gateway

The CortexHub MCP Gateway is the runtime surface AI agents talk to. It speaks the Model Context Protocol over JSON-RPC (and SSE for long-running invocations), enforces the org / agent policy stack on every tool call, manages credentials on the agent's behalf, and issues signed audit receipts.

This spec documents the OAuth flow and .well-known/ discovery surface only. The JSON-RPC entry point at POST /v1/mcp is deliberately not described here - its method surface (tools/list, tools/call, initialize, etc.) is described by MCP's own introspection rather than OpenAPI.

Authentication: partner / external-agent calls to POST /v1/mcp authenticate with an org API key sent in the X-CortexHub-Key request header (enforced on the ASGI /v1/mcp route; not modelled as an OpenAPI securityScheme because the JSON-RPC entry point is hidden from this spec). Interactive agents use the OAuth flow documented here instead.

Full documentation: https://docs.cortexhub.ai