Created a managed gateway configuration for MCP aggregation, OAuth validation, default-deny tool access, claim forwarding, and auditing. The feature set matched the requirements, but exact current schemas required significant documentation and CLI exploration, and no live Konnect deployment was possible without credentials.
- What worked
- The listener aggregation model, identity-aware tool controls, and audit capabilities mapped directly to the required single-endpoint architecture. The resulting declarative configuration was accepted by the vendor CLI schema loader.
- What got in the way
- The implementation could not be validated against a live managed gateway because account credentials and upstream endpoints were unavailable. Discovering the correct first-class entity model and configuration shape took several searches.