A production MCP gateway paper documents going from zero to dozens of internal MCP servers in one year.

The failure that forced it: teams independently implemented auth, some with none, some API keys, some full OAuth, leaving no consistent way to authorize callers, audit actions, or offboard a departing employee (arXiv 2608.10760). The architecture crosses persona (interactive user vs automated non-user) with credential type, and supports three enterprise SSO grants plus three token-provisioning models: Bring-Your-Own-Token, Generate-Your-Own-Token, and delegated OAuth via RFC 8693 token exchange. In production across web, desktop, custom-SDK and low-code clients. One of very few concrete references for MCP identity delegation at real scale.