All your MCP servers.
One endpoint.
Self-host an autonomous MCP gateway. Bring your own LLM, run fully offline, and keep every byte on your infrastructure. AGPLv3.
Every server, every device, every credential
As soon as a team adopts more than a couple of MCP servers, configuration sprawl and access risk explode. BigMCP collapses it into one governed gateway you run yourself.
Without BigMCP
- ×Install & update MCP servers on every device
- ×Configure credentials separately, everywhere
- ×No access control over who runs which tool
- ×Zero visibility into who used what, when
- ×Re-do the whole setup for each new teammate
With BigMCP
- ✓One governed endpoint for every connected tool
- ✓Credentials encrypted at rest (Fernet) — User › Org › Server
- ✓RBAC across 4 roles, scoped per Tool Group
- ✓Immutable, HMAC-signed audit logs
- ✓Self-hosted: your infrastructure, your rules
From scattered servers to one governed URL
You only see tools your admin assigned to your team.
{
"mcpServers": {
"bigmcp": {
"url": "https://acme.bigmcp.cloud/mcp/sse",
"headers": {
"Authorization": "Bearer bigmcp_sk_••••"
}
}
}
}
Your registry + a curated marketplace
Declare your private MCP servers. Or pick from a curated 180+ starter pack — npm, GitHub, Glama, Smithery. All in one search, behind one URL.
Connect public servers in one click
Add Gmail, Linear, Notion or Slack straight from the curated starter pack — credentials auto-detected.
Build custom tools on your stack
Wire BigMCP to Grist, Airtable, a Notion database or your internal API. Ship custom MCP tools for your team's widgets — tasks, projects, dashboards.
Run fully sovereign
Your private registry only, a local LLM (Ollama, vLLM), and air-gap mode on. Nothing leaves your network.
Everything a team needs to run MCP in production
Custom server management
Register from any source — npm, pip, GitHub, Docker, HTTP, local binary. Auto-discovery via tools/list. Team vs personal visibility.
Selective exposure
Tool Groups with PRIVATE / ORG / PUBLIC visibility, plus scoped API keys exposing only the tools you choose.
Auth & security
OAuth 2.0 + PKCE, JWT, MFA/TOTP, API keys (bcrypt), credentials encrypted at rest with Fernet.
Multi-tenant by design
Organization isolation with 4-tier RBAC and hierarchical credentials. Unlimited users and orgs.
Custom MCP registry
Declare your private MCP servers and keep them entirely inside your network. Air-gap compatible, full sovereignty.
AI orchestration
Natural language to workflow, a composition lifecycle, and durable steps that survive crashes and restarts.
Compositions that survive crashes & restarts
A resumable executor persists every step in Postgres. Promote a validated composition and it becomes a first-class MCP tool. Five suspending step types pause and resume cleanly:
Plus non-suspending steps transform (LLM JSON extraction) and foreach (fan-out over a list) — shipped in 2.5.
elicitPause mid-flight for human inputwait_untilClock-driven resume at a future timewait_callbackHMAC-protected webhook resumesubcompositionCall another composition, suspend until it endsapprovalCross-user gate, four-eyes by defaultFull control over who sees what
Four roles, hierarchical credentials, and immutable audit logs with HMAC-SHA256 integrity. Run a hardened, closed deployment with the marketplace disabled and custom servers only.
Compared, on the axes that matter to a sovereign deployment
We don't claim to be the only answer. Where BigMCP is built to win is autonomy — you choose the LLM, you hold the data, and you run the infrastructure. No proprietary lock-in, no per-seat gate.
| Capability | BigMCP | Anthropic Cloud | Closed SaaS | DIY |
|---|---|---|---|---|
| Self-host (AGPLv3) | ✓ | — | SaaS only | ✓ |
| Choose your own LLM (BYOL) | ✓ | Claude only | vendor lock-in | ✓ |
| Air-gap support | ✓ | — | — | depends |
| Data residency control | full | vendor | vendor | full |
| Custom MCP servers | unlimited | vendor catalogue | vendor | unlimited |
| Built-in RBAC + audit | ✓ | partial | paid tier | build |
| Durable workflows | ✓ B-1 | — | paid tier | build |
| No vendor lock-in | ✓ AGPLv3 | proprietary | proprietary | your code |
Nothing leaves your network
Self-host BigMCP with your own LLM. Everything else stays inside your network. Built for sensitive data, regulated industries, and sovereign deployments.
Your BigMCP. Your brand.
Ship a gateway your teams recognize as yours. Set a custom instance name, drop in your logo, and pick a primary color — on your own domain, in your own palette. No "powered by", no compromise.
One endpoint.
One URL for every tool your agents need
Free and open source under AGPLv3. No user limits, no license keys. Self-host in minutes or try the live demo.