MCP gateway glossary

In short: This glossary defines 40 terms used across our datasheets. They run from protocol basics such as MCP host and transport to CIMD, ID-JAG and audience binding. Each entry leads with a one-sentence definition, then explains how the term relates to MCP gateways.

• MCP
• MCP server
• MCP client
• MCP host
• MCP gateway
• Tool call
• Tool description
• Resource
• Prompt
• Transport
• Streamable HTTP
• stdio
• Authorization server
• Resource server
• OAuth 2.1
• PKCE
• CIMD
• Dynamic Client Registration
• ID-JAG
• Cross App Access
• Enterprise-Managed Authorization
• Token exchange
• Audience binding
• Token passthrough
• DPoP
• mTLS
• Short-lived credential
• Credential brokering
• Per-call authorization
• Allow ask deny
• Human in the loop
• Step-up authentication
• Server registry
• Tool allow-list
• Tool filtering
• Audit trail
• SIEM export
• Kill switch
• Policy enforcement point
• Shadow MCP server

By The Datasheet desk · Published and reviewed 2026-11-03