Agentic Data Plane

Set Up Authentication

Agents and tools authenticate through OAuth. Enable user-delegated access so agents act as the signed-in user, register an OAuth provider when you want to manage one yourself, and connect remote MCP clients. Reach an MCP server behind Google Identity-Aware Proxy or an authenticated Cloud Run service with a keyless Google ID token.

  • Configure an OAuth Provider

    Register an OAuth provider so MCP servers can authenticate users or service accounts against an upstream system like Slack, Jira, or GitHub.

  • Configure User-Delegated OAuth

    Have each end user authenticate to the upstream system with their own credentials. Redpanda stores their token and injects it at call time.

  • Connect to an MCP Server Behind Google Identity-Aware Proxy

    Reach an MCP server behind Google Identity-Aware Proxy or an authenticated Cloud Run service without a service account key or a separate public endpoint.

  • Set Up a GitHub OAuth Provider and MCP Server

    Complete walkthrough for configuring GitHub as an OAuth provider and creating a user-delegated GitHub MCP server.

  • Connect Remote MCP Clients

    Connect external MCP clients to MCP servers in AI Gateway using client metadata documents, dynamic client registration, or manual registration.