Skip to main content

Introduction

Stacklok Enterprise

The Enterprise Cloud UI is a component of Stacklok Enterprise. For a full comparison of ToolHive Community and Stacklok Enterprise capabilities, see Stacklok Enterprise.

The Enterprise Cloud UI gives platform teams and developers a web-based interface for the MCP server and skills catalog managed by the Registry Server. It extends the open source ToolHive Cloud UI with skills discovery and installation, one-click Stacklok Desktop integration, an AI assistant, and full catalog management for platform teams. Use it to:

  • Browse and search the MCP server catalog
  • Install servers into Stacklok Desktop with one click
  • Add servers to AI clients (Claude Code, Cursor, Visual Studio Code)
  • Chat with AI models that can call MCP tools directly
  • Publish, update, and delete MCP server entries
  • Manage registry sources and registries

Where it fits​

The Cloud UI is a Next.js application deployed in your Kubernetes cluster. It reads from and writes to the Registry Server API and receives feature flags from the Enterprise Manager.

Roles​

Access to Cloud UI features is controlled by roles in your identity provider. The Registry Server maps JWT claims to roles that determine what each user can do. At a high level, there are four levels of access:

  • Browse - all authenticated users can search the catalog, view server details, and copy endpoints.
  • Publish - users with entry management permissions can publish, update, and delete MCP server entries.
  • Administer sources - users with source management permissions can create, update, and delete sources.
  • Administer registries - users with registry management permissions can create, update, and delete registries.

The Cloud UI only shows features you have access to. For example, the Registries navigation item only appears for users with source or registry management permissions.

For details on how roles are configured, see the Registry Server authorization guide.

Claims-based visibility​

The Registry Server filters API responses based on the claims in your JWT token. Resources you are not authorized to see are never returned by the API, so they never appear in the Cloud UI. This filtering happens server-side - the Cloud UI does not perform client-side access control.

Feature flags​

The Enterprise Manager can control Cloud UI features through policy directives. Each directive carries an enforcement level (enforced or default):

FeatureControls
assistantShow or hide the AI assistant sidebar

When assistant is set to false with enforcement: "enforced", the sidebar is hidden for all users. Other feature flags such as playground and non_registry_servers apply to the desktop app only - see Enterprise Manager policies for details.

Next steps​