# Passport

> Documentation for Passport, the governed MCP gateway for companies.

## Docs

- [Activity and audit](https://docs.passportmcp.com/admin/activity-and-audit.md): Every governed tool call, attributed and exportable, plus a separate trail of privileged admin actions.
- [Catalog access, passes, and requests](https://docs.passportmcp.com/admin/approvals-and-requests.md): Choose how members connect catalog apps, grant scoped passes, and handle Enterprise requests.
- [Client defaults](https://docs.passportmcp.com/admin/client-defaults.md): Use Enterprise workspace controls to preset which granted MCPs appear in each team's AI clients.
- [Guardrails](https://docs.passportmcp.com/admin/guardrails.md): Built-in secret scanning on every plan, with Enterprise custom block, redact, and alert rules.
- [People and teams](https://docs.passportmcp.com/admin/people-and-teams.md): Use Enterprise workspace controls to manage people, roles, teams, and lifecycle.
- [Context efficiency](https://docs.passportmcp.com/benchmarks/context-efficiency.md)
- [Plans and billing](https://docs.passportmcp.com/billing.md): What each plan includes, how seats are counted, and how to change or cancel a plan.
- [Tool discovery modes](https://docs.passportmcp.com/concepts/discovery.md): How the workspace gateway exposes tools as your fleet grows: flat, apps, compact, and auto.
- [The Passport model](https://docs.passportmcp.com/concepts/model.md): Workspaces, MCPs, passes, teams, bundles, AI clients, and the gateway that ties them together.
- [SCIM provisioning](https://docs.passportmcp.com/enterprise/scim.md): Make your identity provider the source of truth for who is in the workspace, so deprovisioning a user instantly revokes their access everywhere.
- [SIEM and OTLP export](https://docs.passportmcp.com/enterprise/siem-export.md): Stream your workspace's audit and security events to your SIEM over HTTP, or to an OpenTelemetry collector.
- [Single sign-on (OIDC)](https://docs.passportmcp.com/enterprise/sso-oidc.md): Connect your workspace to your identity provider with OpenID Connect. Includes Okta and Microsoft Entra walkthroughs.
- [Passport](https://docs.passportmcp.com/index.md): A governed gateway for company tools. Connect through MCP or Passport CLI, with every call attributed, scanned, and audited.
- [Workspace owner quickstart](https://docs.passportmcp.com/quickstart/admin.md): Connect your first MCP and AI client, invite people, and watch the first governed call land in Activity.
- [Passport CLI](https://docs.passportmcp.com/quickstart/cli.md): Use the governed Passport gateway from Claude Code, Codex CLI, OpenCode, scripts, CI, and cron.
- [Member quickstart](https://docs.passportmcp.com/quickstart/member.md): Accept your invite, install the desktop app, sign in, connect your accounts, and set up each AI client.
- [Network and egress](https://docs.passportmcp.com/security/network.md): How Passport guards outbound requests to admin-supplied URLs, and what the desktop app and bridge talk to.
- [Self-host Passport](https://docs.passportmcp.com/self-host.md): Run Passport as a single container with Postgres, configured entirely from the environment.
- [Troubleshooting](https://docs.passportmcp.com/troubleshooting.md): The common issues members and admins hit, and what each one means.