Skip to main content

Overview

The Secure MCP Gateway CLI provides comprehensive command-line tools for managing your gateway infrastructure. It enables you to configure MCP servers, manage projects and users, control access with API keys, and maintain system health.

Installation

Install via pip

python -m venv .secure-mcp-gateway-venv
source .secure-mcp-gateway-venv/bin/activate
pip install secure-mcp-gateway

Verify Installation

secure-mcp-gateway --version
Enkrypt Secure MCP Gateway CLI v2.1.2

Quick Start

1. Generate Default Configuration

Create the initial configuration file with default settings:
secure-mcp-gateway generate-config
This creates ~/.enkrypt/enkrypt_mcp_config.json (macOS/Linux) or %USERPROFILE%\.enkrypt\enkrypt_mcp_config.json (Windows).
INFO: Generated default config at ~/.enkrypt/enkrypt_mcp_config.json

2. Install Gateway for Your Client

secure-mcp-gateway install --client claude-desktop
Note: Restart Claude Desktop after installation.

CLI Structure

The CLI is organized into command groups:

Configuration Commands

Manage MCP configurations and servers

Project Commands

Create and manage projects

User Commands

Manage users and API keys

System Commands

Backup, restore, and health checks

Getting Help

General Help

secure-mcp-gateway --help

Command Group Help

secure-mcp-gateway config --help
secure-mcp-gateway project --help
secure-mcp-gateway user --help
secure-mcp-gateway system --help

Specific Command Help

secure-mcp-gateway config add --help
secure-mcp-gateway user generate-api-key --help

Global Options

--version
flag
Display the CLI version
--help
flag
Display help information
--docker
flag
Delegate command to Docker container (requires Docker installation)

Configuration File Location

The CLI reads and writes configuration to:
~/.enkrypt/enkrypt_mcp_config.json

Common Workflows

Initial Setup

  1. Generate configuration
  2. Install for your MCP client
  3. Add MCP server configurations
  4. Create projects and users
  5. Generate API keys

Add New Server

  1. Add server to configuration
  2. Configure guardrails (optional)
  3. Test with discovery command

User Management

  1. Create user
  2. Add user to project
  3. Generate API key for user/project combination

Exit Codes

  • 0 - Success
  • 1 - General error
  • 2 - Invalid arguments

Environment Variables

ENKRYPT_GATEWAY_KEY
string
API key for gateway authentication (set by install command)
ENKRYPT_PROJECT_ID
string
Project identifier (set by install command)
ENKRYPT_USER_ID
string
User identifier (set by install command)
HOST_OS
string
Host operating system (Docker only: macos, linux, windows)
HOST_ENKRYPT_HOME
string
Path to .enkrypt directory on host (Docker only)

Next Steps

Explore Configuration Commands

Learn how to manage MCP configurations and servers

Build docs developers (and LLMs) love