
Speakeasy Platform MCP
com.speakeasy.aiPublished by ai.speakeasy.comOfficial publisherv1.0.0Updated Oct 26, 2026
Secure and manage MCP servers through the Speakeasy AI Control Plane from your agent.
Overview
Remote Speakeasy AI Control Plane endpoint that lets an assistant manage and observe MCP servers, skills and assistants under central policy.
- What you can do
- Manage MCP servers, skills, plugins and assistants through the Speakeasy AI Control Plane, with role-based permissions.
- Inspect and export AI usage telemetry, including token and cost tracking, budgets and session deep dives.
- Review logged tool calls, permission changes and access events.
- Apply and check policies that block, redact or log sensitive data and prompt-injection attempts.
- No individual tools are listed in the manifest, so exact operations depend on the hosted platform.
- When to use it
- Useful for organizations that already run Speakeasy's control plane and want an agent to administer or audit MCP access, permissions and AI spend rather than call a specific SaaS tool. Individual developers without a Speakeasy account will get little from it.
- Requirements
- A remote streamable HTTP endpoint at ai.speakeasy.com with OAuth authentication required; a Speakeasy account and organization on the hosted platform. No environment variables or headers are declared.
Installation
In SourceWeft
- Open Speakeasy Platform MCP in the dashboard and add it to a workspace.
- Connect the required credentials. They are stored privately and never shown on public pages.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/com.speakeasy.ai%2Fplatform/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Other MCP clients
Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.
{
"mcpServers": {
"speakeasy-platform": {
"type": "http",
"url": "https://ai.speakeasy.com/platform-mcp"
}
}
}README
Speakeasy AI Control Plane
Securely scale AI usage across your organization. Built for humans and agents.
Learn more »
Documentation · Running locally · Tech Stack · Contributing · Login · Roadmap
Introduction
This repository is the open source stack behind Speakeasy's AI control plane. Secure and centrally manage MCPs, Skills, and Assistants your whole company to access, with fine-grained permissions, threat detection, and full observability of token use and costs. Every tool call, permission change, and access event logged and searchable. SOC 2 Type II and ISO 27001 certified.
To get started on the hosted platform you can Sign up, or check out the Quickstart guide.
Supports popular AI providers
[Claude] [Claude Code] [ChatGPT] [Codex] [Gemini] [Cursor] [GitHub Copilot]
Observe
Track AI usage across teams and measure impact with either tokens or cost. Deep dive expensive sessions, create budgets and measure tool effectiveness. Built on a foundation of Opentelemetry. Exportable and interactive via platform MCP and a built in assistant.
Secure
Every prompt, response, and agent action is inspected and enforced in real time. Sensitive data is blocked, redacted, or logged before it leaves your environment. Create and enforce flexible policies to prevent prompt injection, log shadow use and detect PII secrets and other sensitive data types.
Connect
A single control layer for connecting your agents to MCPs for your SaaS vendors, APIs, and internal systems, with policy enforcement and granular access control built in. Private networking and tunneling deployed on demand.
Distribute
Centralise distribution of MCPs, Skills, Plugins and Assistants to your team based on enterprise roles. Team, server, and tool level permissions enforced through RBAC and Oauth2.1. Synced to your enterprise IDP (Okta, Azure AD, Google Workspace, etc.).
Support
- Chat with us: Join our slack for support and discussions or email us at [email protected].
- Contribute feature requests or report issues on our roadmap.
- Documentation for the platform is available here.
Running locally
Run ./zero until it succeeds. This script is what you use to run the dashboard and services for local development. It installs dependencies, runs pending database migrations, and starts everything up.
The main dependencies are Mise and Docker. The ./zero script will guide you to install these if they are not found.
Seed your local organization with a realistic working environment — a deployed API, agent sessions, telemetry, risk findings, teammates, and an API key:
It talks to the databases directly, so it can run before the services are up, and re-running it resets the seeded data.
To work on several branches at once, each git worktree can run its own full stack on its own ports:
See CONTRIBUTING.md for more detail on local development, auth, worktrees, and the CLI.
Contributing
Contributions are welcome! Please open an issue or discussion for questions or suggestions before starting significant work.
See CONTRIBUTING.md for development setup and detailed contribution guidelines.
Tech Stack
- TypeScript — dashboard language.
- Golang — backend language.
- Goa — design-first API framework.
- Temporal — workflow engine.
- Polar — usage-based billing.
- OpenRouter — LLM gateway.
- Speakeasy — generated SDKs. Spec hosted here.
Contributors
[Speakeasy contributors]Source: README.md at commit cc04b93
Tools
0Version history
1- v1.0.0LatestOct 22, 2026
Score
85% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
- Auth declaredRequired10 pts
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts