MCP gateway and governance
for enterprise agents

Give teams a secure way to discover, manage, and control MCP servers without slowing down development.

86M+ FastMCP downloads/mo

70% of MCP servers worldwide

OAuth 2.1 + RBAC built in

Start free Book a demowith our team

Prefect is trusted in Production.

Enterprise MCP Gateway

Horizon works with your identity provider.

Put Gateway between every AI client and every MCP tool, then keep identity anchored in the IdP your company already trusts. User claims, group membership, policy decisions, and audit events stay in one governed path. Popular configurations include Okta, Microsoft Entra ID, Google Workspace, Auth0, OneLogin, JumpCloud, Ping Identity, CyberArk, and Duo.

Claims

Read from IdP

Policy

Applied per tool

Audit

Written once

Supported identity providers

65 supported identity integrations across SAML, OIDC, OAuth, SCIM, and directory sync.

IdentityGatewayMCP

Access People HR

Identity provider

Apple

Identity provider

AWS Cognito

Identity provider

Breathe HR

Identity provider

CAS SAML

SAML

ClassLink

Identity provider

Cloudflare

Identity provider

CyberArk SCIM

SCIM

Entra ID OIDC

OIDC

Entra ID SCIM

SCIM

Fourth

Identity provider

GitLab OAuth

OAuth

Google OAuth

OAuth

Google SAML

SAML

Intuit OAuth

OAuth

JumpCloud SCIM

SCIM

LastPass

Identity provider

Login.gov OpenID Connect

OIDC

Microsoft OAuth

OAuth

NetIQ

Identity provider

Okta OIDC

OIDC

Okta SCIM

SCIM

OneLogin SCIM

SCIM

PingFederate SAML

SAML

PingOne SAML

SAML

Rippling SAML

SAML

SailPoint SCIM

SCIM

Salesforce SAML

SAML

Shibboleth Unsolicited SAML

SAML

Slack OAuth

OAuth

Supabase + WorkOS SSO

SSO

VMware

Identity provider

Xero OAuth

OAuth

Okta

SAML, OIDC, SCIM

Microsoft Entra ID

SAML, OIDC, SCIM

Google Workspace

SAML, OIDC

Auth0

SAML federation

OneLogin

SAML, SCIM

JumpCloud

SAML, SCIM

Ping Identity

SAML, SCIM

CyberArk

SAML, SCIM

Duo

SAML

ADP OpenID Connect

OIDC

Auth0

Identity provider

BambooHR

Identity provider

Bubble Plugin

Identity provider

Cezanne HR

Identity provider

Clever OIDC

OIDC

CyberArk SAML

SAML

Duo

Identity provider

Entra ID SAML

SAML

Firebase

Identity provider

GitHub OAuth

OAuth

Google Directory Sync

Directory sync

Google OIDC

OIDC

HiBob

Identity provider

JumpCloud SAML

SAML

Keycloak

Identity provider

LinkedIn OAuth

OAuth

Microsoft AD FS SAML

SAML

miniOrange

Identity provider

NextAuth.js

Identity provider

Okta SAML

SAML

OneLogin SAML

SAML

Oracle SAML

SAML

PingFederate SCIM

SCIM

React Native Expo

Identity provider

Rippling SCIM

SCIM

Salesforce OAuth

OAuth

Shibboleth Generic SAML

SAML

SimpleSAMLphp

SAML

Supabase + AuthKit

AuthKit

Vercel OAuth

OAuth

Workday

Identity provider

FastMCP Authority

Everything we learned building 70% of MCP servers - yours by default.

FastMCP is the open-source Python framework behind 70% of MCP servers worldwide, with 86M+ downloads last month. Every pattern we discovered, every failure mode we fixed - it's baked into the Horizon platform.

Horizon is where those servers run in production. If you are already using FastMCP, deploying to Horizon is one git push. If you are using another framework, Horizon works with any spec-compliant MCP server.

FastMCP to Horizon

From FastMCP code to a live MCP server URL.

Write your server in Python, push to GitHub, and get a production MCP server URL in 60 seconds. Horizon adds OAuth 2.1, dynamic client registration, scaling, and monitoring without extra deployment scripts.

View FastMCP documentation

from fastmcp import FastMCP
mcp = FastMCP("my-tools")
@mcp.tool()
def query_database(sql: str) -> dict:
    return db.execute(sql)

# Deploy to Horizon
$ git push origin main
# Live at https://my-tools.horizon.prefect.io in 60 seconds

Managing MCP servers at scale is the real challenge.

One MCP server is easy. Fifty servers across 5,000 employees, each needing authentication, access control, and monitoring, is the problem Horizon solves.

Where are your MCP servers deployed?

Horizon Deploy gives every server a managed production URL with OAuth 2.1. No infrastructure to manage.

Which MCP servers exist across your org?

Horizon Registry catalogs every internal and third-party MCP server with ownership, versioning, and approval status.

Who can access which MCP tools?

Horizon Gateway enforces tool-level RBAC, authentication, and audit logging across every server.

The Platform

Ship MCP servers in seconds. Govern them for the enterprise.

Deploy / Registry / Gateway / Remix

Deploy MCP Servers

Push code to GitHub, get a production MCP server URL in 60 seconds. OAuth 2.1, scaling, and monitoring included.

Learn more

MCP Server Registry

A central catalog of every MCP server in your organization, internal and third-party, with ownership tracking and version control.

Learn more

MCP Gateway & Access Control

Tool-level RBAC, authentication, and audit logs for every MCP server, with a full trail of who can access what.

Learn more

Remix Servers

Combine tools from multiple MCP servers into one governed endpoint. Give each team exactly the capabilities they need.

Learn more

Customer Proof

Teams are already running MCP in production with Horizon.

Theory Venturescase-study

Because we've built these bespoke MCP tools with Horizon, I can stay in my LLM chat UI for a lot longer and get the information I need directly without having to tab through all these different places to copy and paste.

Adam Conway

Senior AI Engineer

Enatacase-study

Horizon actually had the best onboarding experience on my team. Even people who have not done tech before were able to onboard onto the tool, which is a very strong sign of ease of use.

Smit Shah

Founder

Nitorum Capitalcase-study

Horizon is the avenue by which we can best deploy MCP within our organization. Out of the box, take my GitHub repo, launch it, and it just works for us.

James Brink

Head Trader

Protocol-Native

One endpoint. Every AI client.

Horizon MCP servers work with any client that supports the Model Context Protocol. Deploy once, then connect from Claude, Cursor, Windsurf, VS Code, OpenAI, Bedrock, and more.

Claude

Add Horizon servers as custom Connectors in Claude for Work.

Cursor

Connect to Horizon MCP servers from Cursor's AI coding environment.

Windsurf

Use Horizon servers with Windsurf's agentic IDE.

VS Code

Connect GitHub Copilot and other VS Code MCP clients to Horizon servers.

Amazon Bedrock

Integrate Horizon MCP servers with Bedrock agents and internal tools.

OpenAI Agents

Use Horizon servers with OpenAI's agent framework and MCP-compatible tooling.

Any MCP client

Horizon speaks the MCP spec, so any compliant client works.

Claude Connectors

Claude Connectors powered by Horizon.

Anthropic's Claude for Work lets teams add custom Connectors by pasting in a remote MCP server URL. Horizon Deploy gives you that URL, with OAuth 2.1 and enterprise access controls already handled.

Deploy MCP Servers

Deploy MCP servers with one git push.

Connect your repo and Horizon builds, containerizes, and deploys your MCP server to a production URL - with OAuth 2.1 auth, autoscaling, and observability configured automatically.

Learn about Horizon Deploy

Horizon Deploy

main

git push

Building

Deploying

Live

https://domain.fastmcp.app

OAuth 2.1

Live with auto-scaling and branch previews

MCP Server Registry

Your organization's MCP server catalog.

See every MCP server across your organization in one place. Track ownership, browse exposed tools and capabilities, manage approved versions, and import third-party servers instead of rebuilding what already exists.

Learn about Horizon Registry

data1 results

Snowflake

Data warehouse

312

Discover and connect to approved MCP servers across your organization

MCP Gateway & Access Control

MCP authentication, RBAC, and audit trails.

Every Horizon MCP server sits behind Gateway. Enforce tool-level RBAC, authentication tied to identity, and full audit trails for every access attempt across every server in your organization.

Learn about Horizon Gateway

Horizon Gateway

ACCESS GRANTED

Identity

Sales Agent

MCP Server

Salesforce CRM

Policy Check Authorized

Fine-grained access control with full audit trail

Remix Servers

Compose the exact MCP server each team needs.

Combine tools from multiple MCP servers into a single governed endpoint. Your engineering team gets GitHub, Jira, and PagerDuty. Your sales team gets Salesforce and HubSpot. No over-provisioning, no context pollution.

Learn about Remix Servers

Remix ServerEngineering Team

GitHub

Jira

PagerDuty

Salesforce

Engineering Remix

IssuesPRsTicketsIncidents

Combine tools from multiple servers into team-specific endpoints

Differentiation

The MCP platform built by the team that built the ecosystem.

No other MCP platform combines open-source framework leadership with full-lifecycle enterprise infrastructure.

Built by the creators of FastMCP

We created the framework behind 70% of MCP servers - we know what breaks at scale.

Full lifecycle, not just one piece

Deploy, catalog, secure, and monitor MCP servers in one platform instead of stitching together point solutions.

Production-grade from day one

OAuth 2.1, RBAC, audit logs, auto-scaling, and monitoring are built in for real production workloads.

Works with the AI clients teams actually use

Any MCP client. Any MCP framework. Claude, Cursor, Windsurf, VS Code, OpenAI, and Bedrock.

Quick Start

Go from code to production in three steps.

Horizon keeps the path from MCP code to a governed production endpoint short enough for individual developers and robust enough for enterprise teams.

Write your MCP server

Use FastMCP or any MCP framework to define the tools your agents need.

Push to GitHub

Connect your repo to Horizon. Every push to main auto-deploys and pull requests get preview environments.

Share the URL

Your server gets a production URL with OAuth 2.1, ready for Claude, Cursor, Windsurf, OpenAI, or any MCP client.

Deploy your first MCP server in 60 seconds.

Free for personal projects. Enterprise governance and RBAC for teams. No credit card required.

Start free Book a demowith our team

MCP gateway and governance for enterprise agents

Give teams a secure way to discover, manage, and control MCP servers without slowing down development.

Horizon works with your identity provider.

Access People HR

Apple

AWS Cognito

Breathe HR

CAS SAML

ClassLink

Cloudflare

CyberArk SCIM

Entra ID OIDC

Entra ID SCIM

Fourth

GitLab OAuth

Google OAuth

Google SAML

Intuit OAuth

JumpCloud SCIM

LastPass

Login.gov OpenID Connect

Microsoft OAuth

NetIQ

Okta OIDC

Okta SCIM

OneLogin SCIM

PingFederate SAML

PingOne SAML

Rippling SAML

SailPoint SCIM

Salesforce SAML

Shibboleth Unsolicited SAML

Slack OAuth

Supabase + WorkOS SSO

VMware

Xero OAuth

Okta

Microsoft Entra ID

Google Workspace

Auth0

OneLogin

JumpCloud

Ping Identity

CyberArk

Duo

ADP OpenID Connect

Auth0

BambooHR

Bubble Plugin

Cezanne HR

Clever OIDC

CyberArk SAML

Duo

Entra ID SAML

Firebase

GitHub OAuth

Google Directory Sync

Google OIDC

HiBob

JumpCloud SAML

Keycloak

LinkedIn OAuth

Microsoft AD FS SAML

miniOrange

NextAuth.js

Okta SAML

OneLogin SAML

Oracle SAML

PingFederate SCIM

React Native Expo

Rippling SCIM

Salesforce OAuth

Shibboleth Generic SAML

SimpleSAMLphp

Supabase + AuthKit

Vercel OAuth

Workday

Everything we learned building 70% of MCP servers - yours by default.

From FastMCP code to a live MCP server URL.

Managing MCP servers at scale is the real challenge.

MCP gateway and governance
for enterprise agents