Key Takeaways
- Multi-tenant MCP on an Android SMS gateway means per-tenant keys, devices, and HMAC secrets — not a turnkey “sell SMS” product.
- A shared MCP process with one Bearer token is a cross-tenant send bug waiting for a prompt.
- Contracted panel branding is separate (from From $2,000) and still meters devices + volume.
- No first-party MCP plugin. REST stays canonical.
- BYO Android and operator credit per tenant SIM. We meter devices and volume (Free 300 lifetime; paid from $19/mo).
Summary
Multi-tenant MCP considerations for an Android SMS gateway are isolation: keys, devices, logs, HMAC secrets. Spoke security: multi-tenant MCP security. Concepts: multi-tenant concepts. Spec: modelcontextprotocol.io. REST: Developer Center.
One MCP stdio process with one env key is a single tenant, no matter how many “workspace” labels you put in the prompt.
Tenants are key and device silos
Do not invent a turnkey “sell SMS as a business” control plane. Contracted branding is quoted separately; sending still meters devices and volume. Pricing. Each tenant brings Android and operator credit.
Context
Agencies and internal platforms want one agent host. The failure is sending tenant A’s OTP from tenant B’s SIM. MCP is not a first-party plugin that solves tenancy.
Isolation checklist
- Resolve tenant before tool dispatch; fail closed.
- Per-tenant Bearer in a vault — never a shared production key.
- Device ids namespaced; reject cross-tenant deviceIds.
- HMAC secret per inbound webhook URL.
- Logs: tenant id + message id; no bodies.
What must not leak
| Asset | Per tenant | If shared |
|---|---|---|
| API key | Required | Cross-send |
| Device pool | Required | Wrong MSISDN on OTP |
| HMAC secret | Required | Forged events across orgs |
| Operator airtime | Required | Someone else pays the radio |
Meters stay per account
Platform volume and device caps apply per customer account, not “the MCP box.” Free is 300 SMS lifetime for a lab — not a shared reseller bucket.
Operations
Last-seen and OEM killers are still per handset. Setup. On-call must know which tenant’s phone died.
HMAC per tenant secret
Verify on the raw body. Do not reuse one webhook secret for every customer. Webhooks.
Decision guide
Ship multi-tenant MCP only with vaulted keys and namespaced devices. If you cannot name the tenant on every send, keep one tenant per process.
Checklist
- Tenant resolved before send.
- No shared Bearer.
- HMAC secret scoped.
- No “sell SMS” product theatre.
- No first-party plugin claim.
Next steps
Tool schema: send_sms tool design. Keys: auth and API keys.
Related product pages
Jump to the live product docs for this topic—not another long-form article.
- SMS API documentationLive endpoint reference
- device and SMS volume pricingPlans and allowances
- Android SMS gateway product guideDefinition, product, and how to buy
- download the Android gateway appGet the APK





