{"componentChunkName":"component---src-templates-simple-markdown-js","path":"/docs/mcp/architecture/","matchPath":"","result":{"data":{"markdownRemark":{"html":"

Architecture & Authentication

\n

Authentication

\n

Agents authenticate using a standard Shipwell API token passed in the Authorization header on every request:

\n
\n
\n
Copy
\n
Copied
\n
\n 
Authorization: Bearer YOUR_SHIPWELL_API_TOKEN
\n
\n

No tokens are stored on the MCP server. Authentication is stateless and per-request — the server forwards the token to the Shipwell API and returns the result. If your token is revoked or rotated in Shipwell, it takes effect immediately with no MCP-side changes needed.

\n

Hosted Deployment

\n

The production MCP Server is hosted behind HTTPS:

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
EnvironmentEndpoint
Productionhttps://mcp.shipwell.com/mcp
Sandboxhttps://sandbox-mcp.shipwell.com/mcp
\n

Local Deployment (Stdio)

\n

You can also run the MCP server as a local stdio process. This is useful for individual developer setups or environments where outbound HTTPS to the hosted server is not permitted.

\n

Set your token as an environment variable:

\n
\n
\n
Copy
\n
Copied
\n
\n 
export SHIPWELL_API_TOKEN=your_token_here
\n
\n

Then configure your AI client to launch the server process via stdio. Refer to your client's MCP documentation for the exact config format.

\n

Security Model

\n","headings":[{"value":"Architecture & Authentication","depth":1},{"value":"Authentication","depth":2},{"value":"Hosted Deployment","depth":2},{"value":"Local Deployment (Stdio)","depth":2},{"value":"Security Model","depth":2}]},"contentItem":{"data":{"lastModified":"2026-05-14T19:02:55.000Z","enableToc":null,"disableLastModified":null,"tocMaxDepth":null,"requestLogin":false}},"siteConfig":{"enableToc":true,"disableLastModified":false,"tocMaxDepth":4}},"pageContext":{"matchPath":"","id":"609dd6ca-9493-5d91-9ff4-27ebb74ae836__redocly content/docs/mcp/architecture/","seo":{"title":"Architecture & Authentication","description":null,"image":"","keywords":null,"jsonLd":null,"lang":null,"siteUrl":null},"pageId":"docs/mcp/architecture.md","pageBaseUrl":"/docs/mcp/architecture","type":"markdown","toc":{"enable":true,"maxDepth":4,"headings":[{"depth":1,"value":"Architecture & Authentication","id":"architecture--authentication"},{"depth":2,"value":"Authentication","id":"authentication"},{"depth":2,"value":"Hosted Deployment","id":"hosted-deployment"},{"depth":2,"value":"Local Deployment (Stdio)","id":"local-deployment-stdio"},{"depth":2,"value":"Security Model","id":"security-model"}]},"data":{"title":""},"catalogInfo":null,"link":"/docs/mcp/architecture/","sidebarName":"developerPortal","isLanding":false,"showPrevButton":null,"showNextButton":null,"apiVersions":null,"apiVersionId":null,"isDefaultApiVersion":null}},"staticQueryHashes":["1123603147","1302185487","1344209882","1398840060","1520077861","1975142765","2667623876","2950305614","3240152602","3743992808","561138138"]}