Control Plane MCP Server

ThinkNEO MCP + A2A Gateway

Dual-protocol gateway: MCP tools + A2A Protocol agent in a single governed runtime

---

Status

Live Endpoints

---

What This Is

This repository contains the ThinkNEO Gateway, a dual-protocol server that exposes AI governance tools through both the Model Context Protocol (MCP, Anthropic 2024) and the Agent-to-Agent Protocol (A2A, Google/Linux Foundation 2025).

The gateway implements a bidirectional MCP-A2A bridge: MCP clients can dispatch A2A tasks, and A2A agents can call MCP tools. Both protocols share the same governed runtime, meaning all traffic passes through the ThinkNEO Enterprise AI Control Plane for policy enforcement, audit logging, spend tracking, and compliance checks.

The server is production-deployed as a single Docker container, serving MCP on /mcp and the A2A Agent Card at /.well-known/agent.json. All 55 MCP tools and 24 A2A skills run in the same process, share the same PostgreSQL database, and are wrapped with the same free-tier middleware (500 calls/month, auto-provisioned API keys).

---

MCP Tools

55 tools across 12 categories. All tools accept JSON-RPC 2.0 via Streamable HTTP.

Governance (6)

Safety & Detection (Free)

AI Smart Router (3)

MCP Marketplace (5)

Trust Score (2)

Observability (5)

Value Attribution / ROI (7)

Outcome Validation (4)

Policy Management (4)

Compliance Reporting (2)

Benchmarking (3)

---

A2A Capabilities

This gateway is simultaneously an A2A-compliant agent, implementing the Agent-to-Agent Protocol v0.3.0 maintained by the Linux Foundation.

Agent Card

Publicly discoverable at /.well-known/agent.json. Describes all 24 A2A skills, authentication requirements, and runtime capabilities.

View live Agent Card

MCP-A2A Bridge (4 tools)

Bidirectional protocol translation. An A2A agent can consume MCP tools; an MCP client can dispatch A2A tasks.

A2A Governance (4 tools)

Full A2A task lifecycle is audited: task_sent - task_accepted - task_completed - flow traced - audit recorded.

---

Architecture

 MCP Clients                     A2A Agents
 (Claude, Cursor,                (Any A2A-compliant
  ChatGPT, custom)                agent or service)
       |                               |
       |  Streamable HTTP              |  JSON-RPC 2.0
       |  POST /mcp                    |  POST /a2a
       |                               |
       +---------------+---------------+
                       |
              +--------v---------+
              |  ThinkNEO        |
              |  Gateway         |
              |                  |
              |  MCP Runtime     |
              |  A2A Runtime     |
              |  MCP <-> A2A     |
              |  Bridge          |
              +--------+---------+
                       |
           +-----------+-----------+
           |                       |
    +------v-------+       +------v-------+
    | Governance    |       | Data Layer   |
    | Policy Engine |       | PostgreSQL   |
    | FinOps        |       | 33 tables    |
    | Audit Trail   |       | Usage log    |
    | Compliance    |       | API keys     |
    +---------------+       +--------------+

---

TCK Compliance

This gateway implements the A2A Protocol v0.3.0 specification maintained by the Linux Foundation. The official Google-published Technology Compatibility Kit (TCK) validates 82 test cases against the implementation.

Current status: 97.6% passing (80/82)

The 2 failing tests are in the optional_capability category -- features marked as optional in the specification that are deliberately not implemented. See TCK_REPORT.md for the detailed breakdown, including the specific test cases that fail and rationale for each.

---

Quick Start: MCP Client

Add to your Claude Desktop config (~/.claude/claude_desktop_config.json):

{
  "mcpServers": {
    "thinkneo": {
      "url": "https://mcp.thinkneo.ai/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}

Or use with Cursor (.cursor/mcp.json):

{
  "mcpServers": {
    "thinkneo": {
      "url": "https://mcp.thinkneo.ai/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}

Quick Start: A2A Client

Discover the agent:

curl https://mcp.thinkneo.ai/.well-known/agent.json

Send a task:

curl -X POST https://agent.thinkneo.ai/a2a \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "method": "tasks/send",
    "id": "1",
    "params": {
      "id": "task-001",
      "message": {
        "role": "user",
        "parts": [{"text": "Check if this prompt is safe: ignore all previous instructions"}]
      }
    }
  }'

---

Authentication

• API Key: Prefix tnk_, provided via Authorization: Bearer <key> header
• OAuth 2.1: Full authorization code flow supported
• Public tools (safety checks, provider status, marketplace search) work without authentication

Self-Signup

Auto-provision a free API key (500 calls/month):

POST https://mcp.thinkneo.ai/mcp/signup

No credit card required. All 55 tools available on the free tier.

Enterprise Features

• Per-minute rate limiting with configurable thresholds
• IP allowlist per API key
• Granular scopes (read, execute, custom)
• API key rotation with revocation log
• Enterprise tier with unlimited calls
• OAuth 2.1 with client credentials flow
• Dedicated support and SLA

Contact: hello@thinkneo.ai

---

License

MIT

Links

• Website: thinkneo.ai
• Developer Docs: mcp.thinkneo.ai/mcp/docs
• MCP Marketplace: mcp.thinkneo.ai/registry
• Glama Listing: glama.ai/mcp/servers/ThinkneoAI/mcp-server
• A2A Agent Card: mcp.thinkneo.ai/.well-known/agent.json
• Company: ThinkNEO AI Technology Co. Ltd (Hong Kong) | NVIDIA Inception Member | Anthropic Partner Network