Kong Konnect MCP Server

Interact with Kong Konnect through AI assistants and IDE copilots using the Model Context Protocol (MCP). Access Kong Gateway entities, debug API performance, and search documentation from your development environment.

The Kong Konnect MCP Server enables developers to manage API infrastructure and debug performance issues directly from their development environment. You can also plug in Kong Konnect MCP Server to your AI agents to automate tasks like configuration management and performance troubleshooting.

The same tools available in Kong Konnect MCP Server power KAi (Kong’s AI assistant), an in-product AI assistant for Kong Konnect.

{{site.konnect_product_name}} MCP Server

Use cases

The Kong Konnect MCP Server enables many workflows for managing and debugging your API infrastructure:

  • Kong Konnect entity management: Query control planes, services, routes, consumers, consumer groups, plugins, and vaults.
  • API debugging: Create debug sessions with active tracing to investigate performance issues and identify bottlenecks.
  • Analytics and monitoring: Query API request data with filters for time range, status codes, consumers, services, and routes.
  • Kong documentation search: Search Kong’s documentation for configuration guidance and troubleshooting steps.

When should I use an MCP Server?

Use the Kong Konnect MCP Server when:

  • You want to manage Konnect resources from your IDE or terminal
  • You need to debug API performance issues with active tracing
  • You prefer working with AI assistants for infrastructure tasks
  • You need to query analytics and traffic patterns programmatically

How the Kong Konnect MCP Server works

Kong Konnect MCP Server provides programmatic access to your Konnect resources through the Model Context Protocol. The server exposes specialized tools that AI assistants can use to query Kong Gateway entities, analyze traffic, debug performance issues, and search documentation.

You can connect to the MCP server from:

  • IDEs with MCP client support (VS Code, Cursor, IntelliJ)
  • AI assistants like Claude and GitHub Copilot
  • Claude Code CLI for terminal-based workflows
  • Any MCP-compatible client application

The server connects to Konnect backend services to retrieve Kong Gateway configuration, analytics data, active tracing sessions, and Kong’s documentation. This allows AI assistants to provide contextual assistance for debugging, configuration, and operational tasks.

Kong Konnect MCP Server architecture diagram showing user environment, MCP server, and backend services

Authentication and access

The Kong Konnect MCP Server uses token-based authentication to ensure secure access to your Konnect resources. You can authenticate using either a Personal Access Token (PAT) or a Service Accout Access Token, depending on your use case.

Personal Access Token

The MCP server can authenticate using your Personal Access Token (PAT), which means it only accesses resources you have permission to view. Create a token by opening the Kong Konnect tokens page and selecting Generate Token. All queries respect your organization’s role-based access controls and regional data boundaries.

System Account Access Token

For automated workflows, you can also use a System Account Access Token. SPATs are tied to specific service accounts with defined permissions, allowing secure machine-to-machine authentication without user intervention.

Regional server endpoints

The MCP server is deployed regionally. Connect to the server in the same region where your Konnect resources are deployed.

Region

Server URL

United States (US) https://us.mcp.konghq.com/
Europe (EU) https://eu.mcp.konghq.com/
Australia (AU) https://au.mcp.konghq.com/
India (IN) https://in.mcp.konghq.com/

Default endpoint

The regional endpoint defaults to US region.

Organizations using multiple Kong Konnect regions require separate MCP server connections for each region. Resources cannot be accessed across regions from a single connection.

Organization settings

Kong Konnect MCP Server access is enabled by default. Organization administrators can disable it from the Organization Settings.

Installation

Configure the MCP client of your choice by adding the Kong Konnect MCP Server with your regional URL and PAT. Select your preferred client below for specific installation instructions.

Claude Code CLI

Configure MCP server using the claude mcp add command or by editing ~/.claude.json

Visual Studio Code

Add MCP server configuration through VS Code’s Command Palette and MCP settings

Cursor

Configure MCP server in Cursor Settings under Tools & MCP section

GitHub Copilot - VS Code

Set up MCP server for GitHub Copilot extension in Visual Studio Code

GitHub Copilot - JetBrains

Configure MCP server for IntelliJ IDEA, PyCharm, WebStorm, and other JetBrains IDEs

Other IDEs

Manual setup instructions for Windsurf, Eclipse, and other IDEs

Available tools

The Kong Konnect MCP Server exposes a full suite of tools covering the entire GA Kong Konnect product. It provides three core tools that work together to let your AI assistant discover, understand, and interact with Kong Konnect APIs:

  • search — finds relevant API operations based on a description of what you want to do (e.g. "list all services in a control plane").
  • get_schema — retrieves the full/partial (as required) schema for a specific operation, so the AI knows exactly what parameters and request body fields are required.
  • execute — calls the API operation with the appropriate inputs, based on what get_schema returned.

Rather than calling a fixed set of individual tools, your AI assistant uses this discover-then-execute pattern to perform complex, multi-step tasks across Kong Konnect. This means the AI reasons over the available operations at runtime and constructs the correct API calls, rather than relying on hardcoded tool definitions for every action.

Usage with skills and plugins

The Kong Konnect MCP Server can be installed and used via Plugins and Skills for many existing tools. All the plugins and skills listed on the Kong Skills Hub are MCP-aware and when installed can use the MCP server to accomplish many tasks more effectively across many Kong Konnect products.

What's new in Kong Konnect MCP Server

The following are the latest changes in Kong Konnect MCP Server:

  • Standalone MCP Code Mode released GA (May 18, 2026)

  • Public Beta release (December 19, 2025)

For a complete changelog of all Kong Konnect MCP Server releases, see the Kong Konnect MCP Server changelog.

Frequently asked questions

MCP server access is enabled by default for all organizations. Organization admins can disable this from AI Settings, after which no user will be able to access the MCP server.

If you have KAi enabled, an additional KnowledgeBase tool will be available via the MCP server. This tool creates embeddings from your query and uses a re-ranking model to improve documentation search results. These models are both hosted on AWS Bedrock and no training is performed on your data.

Access to MCP tools is based on the permission levels of the user whose PAT / SPAT is used for authentication.

Verify PAT / SPAT validity, check your organization hasn’t disabled MCP access, and ensure the token has required permissions.

Check your internet connection, verify the regional server URL is correct, and ensure your firewall isn’t blocking mcp.konghq.com.

Check parameter correctness, verify you have resource access permissions, wait if you’re rate limited, and confirm the resource exists.

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!