Enterprise operations

Enterprise mode adds authentication and access control to mcpjungle. These commands are used to bootstrap an enterprise deployment and manage who or what can connect to it. Use the governance guides for the full operational model:

Commands on this page require the server to be running in enterprise mode with mcpjungle start --enterprise.

Treat mcpjungle <command> --help as the authoritative source for current flags. This page keeps the important setup flow, examples, and config patterns.

`init-server`

Initializes a fresh enterprise server.

mcpjungle --registry http://your-server:8080 init-server

Run this once against a new enterprise deployment. It creates the first admin user, generates the admin access token, and stores the server URL and token in ~/.mcpjungle.conf.

This is a one-time bootstrap step. Store the generated admin credentials securely.

Stores an existing access token in ~/.mcpjungle.conf so the CLI can authenticate future requests.

mcpjungle login <access-token>

Example:

mcpjungle login eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

This is what regular users run after an administrator creates their account and shares a token with them.

`create mcp-client`

Creates an authenticated MCP client identity.

mcpjungle create mcp-client <name> [flags]
mcpjungle create mcp-client --conf <file>

Common flags:

--allow

string

Comma-separated allow list of MCP server names. Example: --allow "github,jira".

--access-token

string

Custom token for the client. If omitted, the server generates one and prints it once.

-c / --conf

string

Path to a JSON config file. When provided, the CLI ignores the other flags.

Examples:

# Let mcpjungle generate the token
mcpjungle create mcp-client claude-desktop --allow "github,jira"

# Supply your own token
mcpjungle create mcp-client my-agent \
  --allow "github" \
  --access-token my-custom-token

Config file example:

{
  "name": "claude-desktop",
  "description": "Claude Desktop on Alice's machine",
  "allowed_servers": ["github", "jira"],
  "access_token_ref": {
    "env": "CLAUDE_CLIENT_TOKEN"
  }
}

You can also load the token from a file:

{
  "name": "claude-desktop",
  "allowed_servers": ["github", "jira"],
  "access_token_ref": {
    "file": "/run/secrets/claude-token"
  }
}

When creating a client from --conf, you must provide a custom token via access_token or access_token_ref.

--allow "*" gives the client access to all registered MCP servers, including future ones. This is convenient for testing and strongly discouraged in production.

For token supply options and placeholder handling, see Config file reference.

`delete mcp-client`

Deletes an MCP client and immediately revokes its access to the mcp gateway.

mcpjungle delete mcp-client <name>

Example:

mcpjungle delete mcp-client claude-desktop

`create user`

Creates a standard user account for a human operator.

mcpjungle create user <username> [flags]
mcpjungle create user --conf <file>

Examples:

# Let mcpjungle generate the token
mcpjungle create user alice

# Supply your own token
mcpjungle create user alice --access-token alice-custom-token

Config file example:

{
  "name": "alice",
  "access_token_ref": {
    "env": "ALICE_ACCESS_TOKEN"
  }
}

When user creation succeeds, the CLI prints the mcpjungle login <token> command that the user should run locally.

When creating a user from --conf, you must provide a custom token via access_token or access_token_ref.

For token supply options and placeholder handling, see Config file reference.

`delete user`

Deletes a user and revokes their access to mcpjungle immediately.

mcpjungle delete user <username>

Example:

mcpjungle delete user alice

Typical setup flow

Start the server in enterprise mode

mcpjungle start --enterprise

Initialize the server once

mcpjungle --registry http://your-server:8080 init-server

mcpjungle register --name github --url https://api.githubcopilot.com/mcp \
  --bearer-token ghp_your_token

Create MCP clients for agents and apps

mcpjungle create mcp-client claude-desktop --allow "github"

Create user accounts for operators

mcpjungle create user alice

CLI

API

Configuration

Enterprise operations

`init-server`

`create mcp-client`

`delete mcp-client`

`create user`

`delete user`

Typical setup flow

​init-server

​login

​create mcp-client

​delete mcp-client

​create user

​delete user

​Typical setup flow

`init-server`

`login`

`create mcp-client`

`delete mcp-client`

`create user`

`delete user`

Typical setup flow