I'm trying to set up an MCP server and connect to it from a web MCP client. For example, I set up an MCP Config with the Gmail toolkit. Then I connect to the corresponding Gmail Auth Config. From here, I am able to find the MCP Server's url that looks like this:

https://backend.composio.dev/v3/mcp/<mcp-server-id>/mcp?user_id=<user-id>

Then in my MCP client all I need is this url to connect. Tool calls work even without an API key. Is this expected, or is there a way to enforce better security? Or am I understanding this feature incorrectly? Ideally maybe the url is fixed and a key associated to each user goes in a header.

Hi Omar, Yes, we're now enforcing better security for MCP servers. You can learn more here: https://docs.composio.dev/docs/changelog/2025/11/13