Frequently Asked Questions

MCP Factory is a credential vault for MCP (Model Context Protocol) servers. It holds OAuth refresh tokens and API keys in one place, and hands a fresh access token to any MCP server at runtime — scoped to the right user.

Probably not. The factory pays off when you have two or more MCP servers sharing any OAuth integration, or when you use providers (Microsoft Graph, GoHighLevel) that rotate refresh tokens on every use. For a single MCP server with one user and a non-rotating provider, hand-rolled OAuth is fine.

Out of the box: Google (Ads, Search Console, Gmail, Calendar, Drive, Sheets, Docs), Microsoft Graph (OneNote, Outlook, Teams, OneDrive), GoHighLevel (agency + per-location), WordPress, and static-API-key integrations like Cloudflare, KIE.ai, Stripe, Telnyx, Anthropic, and OpenAI. Custom integrations are a config entry away.

Yes. MCP Factory is open source and ships as a Docker container (~30MB). One env var to boot — an encryption key. Run it behind any reverse proxy (Caddy, Nginx, Cloudflare Tunnel). The Free plan is “self-host whatever you want, forever”.

Free if you self-host (open source, MIT-ish). The hosted version starts at $29/mo (Pro: up to 5 users, all integrations, audit log, email support). Team is $99/mo for unlimited users with SSO and role-based access. Annual billing saves ~17%.

Yes — Pro and Team plans offer a free trial with no credit card required. You can also self-host the open-source version free forever.

Refresh tokens and API keys are encrypted at rest using AES-256 with a per-instance encryption key. API tokens issued to your MCP servers (mcp_xxx) are hashed (SHA-256) and never stored in plaintext. The hosted version runs on a hardened VPS with daily backups.

SOC 2 Type II is in progress on the Team plan. If your use case requires SOC 2 today, self-host on infrastructure that already has your existing compliance posture — that’s the recommended path during the audit window.

Yes. Monthly plans cancel at the end of the current billing cycle. Annual plans can be canceled anytime — you’ll keep access through the end of the prepaid year. No early-termination fees.