tools-only Pre-built Docker Images for MCP Gateway Registry
When using the --prebuilt option with build_and_run.sh, the following pre-built Docker images are pulled from Docker Hub. These images are published to the mcpgateway organization on Docker Hub.
MCP Gateway Images
| Service | Image | Default Tag | Description | Port |
|---|---|---|---|---|
| Registry | mcpgateway/registry:latest |
latest | Main registry service with nginx, SSL, FAISS, and models | 80, 443, 7860 |
| Auth Server | mcpgateway/auth-server:latest |
latest | Authentication service supporting Cognito, GitHub, Google, and Keycloak | 8888 |
| Metrics Service | mcpgateway/metrics-service:latest |
latest | Metrics collection service with SQLite storage and OTEL support | 8890, 9465 |
| Current Time Server | mcpgateway/currenttime-server:latest |
latest | MCP server providing current time functionality | 8000 |
| Financial Info Server | mcpgateway/fininfo-server:latest |
latest | MCP server for financial information | 8001 |
| MCPGW Server | mcpgateway/mcpgw-server:latest |
latest | MCP Gateway server for service management | 8003 |
| Real Server Fake Tools | mcpgateway/realserverfaketools-server:latest |
latest | Example MCP server with mock tools | 8002 |
External Images
The following external images are pulled from their original sources:
| Service | Image | Source | Description | Port |
|---|---|---|---|---|
| Alpine Linux | alpine:latest |
Docker Hub Official | Lightweight Linux for metrics database initialization | N/A |
| Prometheus | prom/prometheus:latest |
Docker Hub Official | Metrics collection and time-series database | 9090 |
| Grafana | grafana/grafana:latest |
Docker Hub Official | Metrics visualization and dashboards | 3000 |
| PostgreSQL | postgres:16-alpine |
Docker Hub Official | Database for Keycloak | 5432 (internal) |
| Keycloak | quay.io/keycloak/keycloak:25.0 |
Quay.io | Identity and access management service | 8080 |
| MongoDB CE | mongo:8.2 |
Docker Hub Official | MongoDB Community Edition 8.2 with replica set support for local development | 27017 (internal) |
Manual Download Commands
To manually pull these images for Kubernetes deployment or offline use:
# MCP Gateway images from Docker Hub
docker pull mcpgateway/registry:latest
docker pull mcpgateway/auth-server:latest
docker pull mcpgateway/metrics-service:latest
docker pull mcpgateway/currenttime-server:latest
docker pull mcpgateway/fininfo-server:latest
docker pull mcpgateway/mcpgw-server:latest
docker pull mcpgateway/realserverfaketools-server:latest
# External images
docker pull alpine:latest
docker pull prom/prometheus:latest
docker pull grafana/grafana:latest
docker pull postgres:16-alpine
docker pull quay.io/keycloak/keycloak:25.0
docker pull mongo:8.2
HTTPS Configuration
By default, pre-built images run on HTTP (port 80) only. To enable HTTPS (port 443):
Option 1: Let's Encrypt Certificates
# Install certbot
sudo apt-get update && sudo apt-get install -y certbot
# Obtain certificate (requires domain and port 80)
sudo certbot certonly --standalone -d your-domain.com
# Certificate files will be at:
# - /etc/letsencrypt/live/your-domain/fullchain.pem
# - /etc/letsencrypt/live/your-domain/privkey.pem
Option 2: Commercial CA Certificates
Purchase SSL certificates from a trusted Certificate Authority.
Copy Certificates to Expected Location
# Create the ssl directory structure
mkdir -p ${HOME}/mcp-gateway/ssl/certs
mkdir -p ${HOME}/mcp-gateway/ssl/private
# Copy your certificate files
# Replace paths below with your actual certificate locations
cp /etc/letsencrypt/live/your-domain/fullchain.pem ${HOME}/mcp-gateway/ssl/certs/fullchain.pem
cp /etc/letsencrypt/live/your-domain/privkey.pem ${HOME}/mcp-gateway/ssl/private/privkey.pem
# Set proper permissions
chmod 644 ${HOME}/mcp-gateway/ssl/certs/fullchain.pem
chmod 600 ${HOME}/mcp-gateway/ssl/private/privkey.pem
Note: If SSL certificates are not present at ${HOME}/mcp-gateway/ssl/certs/fullchain.pem and ${HOME}/mcp-gateway/ssl/private/privkey.pem, the MCP Gateway will automatically run in HTTP-only mode.
Then restart:
./build_and_run.sh --prebuilt
The registry container will detect the certificates and enable HTTPS automatically. Check logs:
docker compose logs registry | grep -i ssl
# Expected: "SSL certificates found - HTTPS enabled"