# Agent Proxy now injects credentials for MCP Server Workloads

Agent Proxy 1.34.6014 injects credentials for Server Workloads whose **Application Protocol** is **MCP**. Agent Proxy handles this traffic as HTTP and injects the credential the same way it does for HTTP Server Workloads. Earlier versions passed MCP traffic through without injecting a credential.

Agent Proxy doesn’t read the MCP messages in this traffic, so these features of the MCP Identity Gateway don’t apply to it:

* [MCP Tool Access Control](/user-guide/access-policies/content-security/mcp-tool-access-control/)
* [CrowdStrike AIDR](/user-guide/access-policies/content-security/crowdstrike-aidr/) inspection
* MCP details, such as the tool name, in Workload Events