Skip to content

Commit 28220b0

Browse files
authored
Clarify the docs around open/closed source and public/private MCP servers (#573)
<!-- Provide a brief summary of your changes --> ## Motivation and Context <!-- Why is this change needed? What problem does it solve? --> The following PR adds more clarity to the docs around what's considered open source, closed source, public and private in the context of MCP servers. ## How Has This Been Tested? <!-- Have you tested this in a real application? Which scenarios were tested? --> ## Breaking Changes <!-- Will users need to update their code or configurations? --> ## Types of changes <!-- What types of changes does your code introduce? Put an `x` in all the boxes that apply: --> - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Breaking change (fix or feature that would cause existing functionality to change) - [x] Documentation update ## Checklist <!-- Go over all the following points, and put an `x` in all the boxes that apply. --> - [ ] I have read the [MCP Documentation](https://modelcontextprotocol.io) - [ ] My code follows the repository's style guidelines - [ ] New and existing tests pass locally - [ ] I have added appropriate error handling - [ ] I have added or updated documentation as needed ## Additional context <!-- Add any other context, implementation notes, or design decisions --> Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
1 parent 999cf9e commit 28220b0

File tree

2 files changed

+24
-1
lines changed

2 files changed

+24
-1
lines changed

docs/guides/publishing/publish-server.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ By the end of this tutorial, you'll have:
1919
## Prerequisites
2020
2121
- An MCP server you've already built ([follow this guide if you don't have one already](https://modelcontextprotocol.io/quickstart/server))
22+
- Your server must be publicly accessible (closed source servers are welcome, but private/internal servers are not supported)
2223
2324
## Deployment Options
2425

docs/reference/faq.md

Lines changed: 23 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,13 @@ See the [publisher README](../../cmd/publisher/README.md)
4747

4848
### Is open source required?
4949

50-
No. While open source code is encouraged, it is not required for either locally or remotely run servers.
50+
No. The registry supports both open source and closed source servers, as long as they are publicly accessible.
51+
52+
**Closed source servers are welcome** - you can publish proprietary MCP servers to the registry as long as:
53+
- The server itself is publicly accessible (not restricted to private networks)
54+
- The installation method is publicly available (e.g., npm package, Docker image on public registries)
55+
56+
This applies to both locally-run and remote servers.
5157

5258
### What package registries are supported?
5359

@@ -98,6 +104,22 @@ These are generally not supported on the official MCP registry, which is designe
98104

99105
If you want to publish private servers we recommend you host your own MCP subregistry, and add them there.
100106

107+
### What's the difference between closed source and private servers?
108+
109+
**Closed source servers** have proprietary code but are **publicly accessible**:
110+
-**Supported**: Can be published to the registry
111+
- ✅ Source code can be proprietary/closed source
112+
- ✅ Installation via public package registries (npm, PyPI, Docker Hub, etc.)
113+
- ✅ Remote servers hosted on public URLs
114+
115+
**Private servers** are **access-restricted** regardless of source code:
116+
-**Not supported**: Cannot be published to the official registry
117+
- ❌ Only accessible to specific users/organizations
118+
- ❌ Installation requires private credentials or network access
119+
- ❌ Remote servers on private networks or behind authentication
120+
121+
**Example**: A commercial MCP server distributed as a paid npm package is closed source but publicly accessible, so it's welcome in the registry. A server only available on your company's internal network is private and not supported.
122+
101123
## Security & Trust
102124

103125
### How do I know a server is from the claimed organization?

0 commit comments

Comments
 (0)