MCP Discovery Proxy deployment never completes on evaluation orgs (2 regions, 4 attempts, runtime 1-18-0-apigee-4)

Summary: On two freshly provisioned Apigee evaluation organizations (asia-east1 and us-central1), every MCP Discovery Proxy deployment stays in Provisioning for 38–55 minutes and then fails with MCP just-in-time provisioning has not completed. The runtime returns 503 protocol.http.NoResolvedHost for ORG.mcp.apigee.internal the whole time. The documentation states MCP is available for evaluation orgs, and known issue 496552286 (regional capacity) does not explain a failure in us-central1. I would like to know whether MCP just-in-time provisioning is actually supported on evaluation orgs / non-Comprehensive environments.

Environment

Item Org A Org B
Project / org ID apigee-eval-508708 apigee-eval-us
Org type Evaluation (60-day trial) Evaluation (60-day trial)
Runtime region asia-east1 us-central1
Instance eval-instance, runtime version 1-18-0-apigee-4 eval-instance, runtime version 1-18-0-apigee-4
Environment / group eval / eval-group (no environment type shown in console) eval / eval-group
Env group hostname 34.111.166.123.nip.io (external LB, regular proxies serve 200) apigee-eval-us.dns-replaceme.example.com (default)
API hub Provisioned in same region, runtime project auto-attached (Project associations tab shows the project) same
OpenAPI spec 3.0.3, 2 operations (getSampleUser, getCallerIp), servers.url == env group hostname same spec, servers.url == env group hostname
Proxy mock-mcp from the MCP Discovery Proxy template; target endpoint https://ORG.mcp.apigee.internal/mcp same

Attempts (all times UTC, 2026-09-17/18)

# Org Deployed at Deploy method Service account Result
1 A 09-17 09:21 Create wizard (create + deploy) none Failed after ~47 min
2 A 09-17 23:51 Undeploy → redeploy (wizard) none Failed after ~55 min
3 A 09-18 02:13 Undeploy → Deploy pane mcp-deployer@… (SA specified) Failed after ~52 min
4 B 09-18 04:13 Create wizard (create + deploy) none Failed after ~38 min

Error shown on the deployment status icon (identical wording in all four cases):

Status: no MCP configuration status has been reported for deployment
"organizations/<org>/apis/mock-mcp/revisions/1"; MCP just-in-time provisioning has not completed

Runtime response during and after each attempt (org A, ~55 probes, one per minute):

POST https://34.111.166.123.nip.io/mcp  {"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}
HTTP 503
{"fault":{"faultstring":"Unable to resolve host apigee-eval-508708.mcp.apigee.internal",
 "detail":{"errorcode":"protocol.http.NoResolvedHost","reason":"TARGET_CONNECT_HOST_NOT_REACHABLE"}}}

Cloud Audit Logs in the customer project show DeployApiProxy accepted, then one ReportInstanceStatus error (FAILED_PRECONDITION: request is missing required specs, resource environments/eval/deployedConfig) about 60–70 s after every deployment — including successful deployments of ordinary reverse proxies (hello-world, mock-target), so this appears unrelated. No other errors are visible from the customer project; the MCP provisioning presumably happens in the tenant project.

What has been ruled out

  • OpenAPI version (3.0.3, within 3.0.0–3.0.3) and servers.url / env group hostname match.
  • API hub not provisioned / runtime project not attached (both verified in console).
  • Environment unusable (regular reverse proxy mock-target deploys and serves 200 in the same environment).
  • Runtime version too old (both instances run 1-18-0-apigee-4, newer than the 1-17-0-apigee-6 release that accompanied MCP GA).
  • Missing deploy-time service account (attempt 3 specified one; no change).
  • Regional capacity (known issue 496552286): us-central1 is not in the published list and fails identically.

Questions

  1. Is MCP just-in-time provisioning supported on evaluation organizations? The overview and quickstart say MCP is available for evaluation orgs, but the quickstart’s deploy step also says the environment “must be a Comprehensive environment”, and evaluation environments have no environment type.
  2. If it is supported, is there a way to see the provisioning error from the customer side (an operation, a log, or a status field)? Nothing is visible in Cloud Audit Logs beyond the accepted DeployApiProxy.
  3. If it is not supported, could the documentation be updated so evaluators do not spend time on it?

Happy to provide the org IDs above, exact timestamps, or run a debug session if useful.

Hi @Eric1450 and a warm welcome to the Apigee forum! :waving_hand:

Thank you for sharing such a thorough, well-documented question regarding your experience with the MCP Discovery Proxy deployment on evaluation orgs.

We have seen your question and are encouraging our community members and Apigee experts to share their knowledge and insights. In the meantime, you might also find our community tech talk on Apigee MCP Tool Authorization at Scale relevant.

Thanks.

1. Is MCP Just-In-Time (JIT) Provisioning Supported on Evaluation Organizations?

No. MCP Just-in-Time (JIT) provisioning is not supported on Evaluation (60-day trial) organizations.

  • Environment Requirements: Exposing APIs as Model Context Protocol (MCP) tools requires a paid Apigee X or Apigee Hybrid organization with a Comprehensive environment type.
  • Evaluation Organization Limitations: Evaluation organizations are provisioned with lightweight, trial-specific environments that lack the Comprehensive environment capabilities and the dedicated backend routing/translation infrastructure required for MCP.
  • Why the Deployment and Runtime Fail:
    • When you deploy an MCP Discovery Proxy on an Evaluation organization, the required backend provisioning workflow is not triggered.

    • Because the provisioning step does not execute, the internal hostname (<org>.mcp.apigee.internal) and its routing endpoints are never created.

    • The deployment remains in a Provisioning / Pending state waiting for the backend setup to complete until it reaches its deployment status timeout (~30–50 minutes), surfacing:

      Status: no MCP configuration status has been reported for deployment ...; MCP just-in-time provisioning has not completed

    • Any request sent to the runtime fails with 503 protocol.http.NoResolvedHost (TARGET_CONNECT_HOST_NOT_REACHABLE) because the internal target URL cannot be resolved.


2. Can You See Provisioning Errors from the Customer Side?

No.

  • The just-in-time provisioning pipeline for MCP manages Google-managed internal routing and gateway infrastructure.
  • Detailed provisioning operations, internal DNS record creation, and low-level pipeline logs are managed at the platform level and are not exported to customer Cloud Audit Logs or Cloud Logging.
  • The only signals exposed on the customer side are:
    1. The proxy deployment status message in the Apigee UI / Management API.
    2. The runtime error (503 NoResolvedHost / DNS resolution failure) when attempting to reach the internal target endpoint.

3. Recommendations & Next Steps

  1. Testing MCP: To evaluate Apigee One MCP, deploy the MCP Discovery Proxy within a standard/paid Apigee organization (Subscription or Pay-as-you-go) using an environment created as a Comprehensive environment type with an attached API Hub instance.
  2. Documentation Feedback: The ambiguity in the documentation—specifically stating availability on trial orgs while requiring Comprehensive environments—has been noted and will be flagged for the documentation team to clarify the exact tier and environment-type prerequisites.

Thanks @maloosatyam, that answers all three questions, and it matches what we observed: four deployments across two orgs (asia-east1 and us-central1) each sat in Provisioning for 38-55 minutes before failing with the same status message, /mcp returned 503 NoResolvedHost the whole time, and no provisioning error appeared in Cloud Audit Logs.

Marking your reply as the solution. For anyone who lands here later: the MCP Discovery Proxy needs a paid Apigee X or Hybrid org with a Comprehensive environment. An evaluation org will not provision it, in any region.

Thanks also for passing the docs inconsistency to the documentation team, and thanks @AlexET for the welcome and the tech talk link.