First tagged release of the MissingMCP gateway — a multi-user, OAuth 2.1–protected remote MCP gateway (https://missingmcp.com).
Connectors
- Garmin — connect your Garmin Connect account (email/password + MFA); forwards to a per-user
garmin_mcpworker. - WHOOP — connect via WHOOP's own OAuth; in-process WHOOP v2 MCP server.
Highlights
- OAuth 2.1 with PKCE (S256), RFC 8414 / RFC 9728 discovery, RFC 7591 Dynamic Client Registration.
- Per-account encrypted credential storage (AES-256-GCM); bearer tokens and client secrets stored only as SHA-256 hashes.
- Path-scoped connectors (
/<adapter>/mcp), per-account worker isolation, off-box S3 backups.
Runs on Railway, built from the Dockerfile.