Accessing settings
Server controls are available directly on the Overview tab of the server detail page. There is also an Edit button in the top-right corner that opens the full settings form.Activate / Deactivate a server
Every server has an Active toggle switch visible at the top of the Overview tab.- Active (on): The server accepts incoming MCP requests normally.
- Inactive (off): The server rejects all incoming requests with a
503 Service Unavailableresponse. Your tools, secrets, and configuration are preserved.
Deactivating a server takes effect immediately. Connected AI clients will lose access until the server is re-activated.
Restart a server
The Restart button (visible in the server header) stops all active connections, clears the runtime state, and brings the server back online with a fresh execution environment. When to restart:- After updating secrets — to ensure the new values are loaded immediately
- If the server appears unresponsive without a clear error in the logs
- After making significant changes to multiple tools at once
Edit server details
Click the Edit button to open the full server form where you can update:- Title and Description
- Category
- Instructions (AI system prompt)
- Rate limit per minute
- Security mode
- Custom domain
Custom domain
You can map your own domain to your MCPCore server. Enter the domain in the Custom Domain field (e.g.mcp.yourcompany.com), then create a CNAME DNS record pointing to your MCPCore subdomain.
SSL certificates are provisioned and managed automatically. The dashboard shows the current SSL status:
- Pending — certificate is being provisioned
- Active — SSL is active and the custom domain is ready
- Failed — check your DNS configuration
Custom domains require a paid plan. MCPCore periodically verifies SSL status and DNS configuration.
Change the security mode
You can switch security modes at any time from the edit form. The subdomain URL stays the same. See Security Overview for a full description of each mode.Delete a server
Deleting a server is permanent and removes:- The server and its subdomain endpoint
- All tools on the server
- All secrets stored on the server
- All traffic and error logs associated with the server
Blocking access without deleting
If you need to temporarily block all access:- Deactivate the server (toggle switch) — simplest option, fully reversible
- Switch to API Key mode and keep the key secret — clients without the key get
401 - Set rate limit to 0 and deactivate — belt and suspenders for critical servers