Toolport
All agents Supported agents

Use MCP servers in Open WebUI with Toolport

Toolport is a free, open source local MCP gateway. Add your servers to Toolport once, enable the gateway's HTTP endpoint, and add that local endpoint as one OpenAPI tool server. Open WebUI then gets all of them through that one endpoint.

Setup

  1. Download Toolport for Windows, macOS or Linux, and add your MCP servers to it (or import the ones your other AI agents already have; secrets go to your OS keychain).
  2. Enable the HTTP endpoint in Toolport's settings, then copy the URL and bearer token it shows. For a manual start, set TOOLPORT_HTTP_TOKEN first and run toolport-gateway --http 8765 (bound to localhost only).
  3. In Open WebUI, add http://localhost:8765 as an OpenAPI tool server and paste the bearer token as its API key. Every Toolport server is now available; search with toolport_search_tools, call with toolport_call_tool.

How the connection works

Open WebUI doesn't read an MCP config file; it consumes OpenAPI tool servers. Toolport's gateway speaks HTTP/OpenAPI natively, so no bridge process (like mcpo) is needed: the gateway serves /openapi.json plus a POST endpoint per tool, and routes calls to your MCP servers exactly as it does for every other agent.

Running local models?

Lazy discovery asks the model to search for tools before calling them, and smaller local models often struggle with that multi-step flow. With a capable model it works well; with a smaller one, have Toolport expose the full tool catalog instead, which any model with basic tool calling can use. Either way Toolport, your keys and local-server traffic stay on your machine; remote MCP servers and hosted model APIs still receive the requests you send them.

Why route your tools through a gateway?

  • One setup, every agent. The same servers work in Open WebUI and every other AI agent on your machine; add a server once and they all get it.
  • Secrets in the OS keychain. API keys are injected at runtime and never sit in Open WebUI's config file.
  • Watched by default. Rug-pull and tool-poisoning detection on every tool, plus per-tool governance and a destructive-tool kill switch. How the security works.

Free on this machine. Pro puts it on every machine. Team gives it to everyone.