# MCP Server Deployment Runbook Template for ERP Integrations

> Source: https://netray.co/tools/mcp-server-deployment-runbook-template
> Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems.
> Section: Free Tools

## Short answer

A fill-in runbook covering host, secrets, network, health checks, monitoring and rollback for an MCP server in front of an ERP.

## Category

developer

## Audience

- DevOps engineer
- ERP administrator
- Integration developer

## Tool

**Kind:** template

**Output:** document

**Fields:**

#### Service name

**Key:** service

**Type:** text

**Default:** erp-purchasing-mcp

#### Release version

**Key:** version

**Type:** text

**Default:** 1.2.0

#### Service owner

**Key:** owner

**Type:** text

**Default:** Integration team

#### Deployment date

**Key:** date

**Type:** date

**Default:** 2026-10-28

#### Host and runtime

**Key:** host

**Type:** text

**Default:** Linux VM app-int-02, Node.js 20 under systemd

#### Transport

**Key:** transport

**Type:** select

**Options:**

- stdio
- Streamable HTTP
- HTTP with SSE

**Default:** Streamable HTTP

#### Target ERP endpoint

**Key:** erp

**Type:** text

**Default:** https://erp-test.example.local/api/v2

#### Secrets location

**Key:** secrets

**Type:** text

**Default:** Company secrets manager, path /mcp/purchasing

#### Health check

**Key:** health

**Type:** text

**Default:** GET /health returns 200 and ERP ping under 2 seconds

#### Rollback trigger

**Key:** rollback

**Type:** textarea

**Default:** Error rate above 5 percent for 10 minutes or any unapproved write detected.

**Blocks:**

#### MCP Server Deployment Runbook

**Body:** Service: {{service}}
Version: {{version}}
Owner: {{owner}}
Deployment date: {{date}}

#### Environment

**Body:** Host and runtime: {{host}}
Transport: {{transport}}
ERP endpoint: {{erp}}
Secrets: {{secrets}}

#### Pre-deployment checks

**Table:**

**Columns:**

- Step
- Owner
- Done
- Notes

**Rows:**

**0:** Tool register reviewed and approved

**0:** Service account created with least privilege

**0:** Evaluation question set run, results attached

**0:** Network rule allows only agent host to ERP endpoint

**0:** Authentication on the MCP endpoint enabled

**0:** Logging to central store confirmed

#### Health and monitoring

**Body:** Health check: {{health}}

Alert on: error rate, latency, unusual call volume, repeated authorization failures and any write tool invoked outside approval.

#### Rollback

**Body:** Trigger: {{rollback}}

Steps: disable write tools, redeploy previous version, rotate the service account secret if misuse is suspected, notify the data owner.

#### Sign-off

**Signatures:**

- Service owner
- ERP administrator
- Security
- Change manager

**Notes:** A starting point to adapt to your platform and change process. Verify transport and authentication options against the MCP specification version your clients use.

## Content

**Intro:** An MCP server is a small service with large reach, so it deserves the same runbook as any integration that can touch the ERP. This template covers where it runs, how it authenticates, how you know it is healthy and how you back it out.

**Sections:**

#### How to use the runbook

**Body:** Fill in the service, release, host and ERP endpoint, then decide the transport. A local stdio server suits a single developer machine. A shared server for a team normally uses an HTTP transport behind authentication. Complete the pre-deployment table, attach the tool register and evaluation results, and collect sign-off. Export to PDF or Word and store it with the change ticket. Create one runbook per environment.

#### Network and secrets

**Body:** Treat the MCP endpoint like any internal API. Require authentication, restrict network access to known client hosts and keep the ERP credential in a secrets manager rather than in configuration files or the client's settings. Rotate the credential on a schedule and whenever a team member with access leaves. If the server runs on premises or air-gapped, document how the model is reached and confirm that no data leaves the boundary.

**Bullets:**

- No secrets in repositories or client config files
- Authenticate every client, even on the internal network
- Allow-list the server's outbound access to the ERP only

#### Health, monitoring and rollback

**Body:** A health check should confirm the server and a cheap round trip to the ERP. Beyond uptime, monitor what is specific to agents: spikes in call volume, repeated authorization failures, long-running queries and any write tool invoked outside the approval path. Define the rollback trigger before go-live and make the first rollback step disabling write tools, since that removes the most risk fastest.

#### Common mistakes

**Body:** Teams often deploy the same server and credentials from test to production, run the server as an administrator, or leave the endpoint open because it is only inside the VPN. Another is failing to version tool definitions, so a changed description silently changes agent behavior. Treat tool descriptions as code and release them with version numbers.

**Cta:** Netray deploys private agent and MCP layers on premises and in sovereign cloud with human approval on writes. If you want help hardening your own deployment, talk to us.

**Faq:**

#### Should an MCP server run locally or centrally?

**Answer:** Local stdio servers suit individual developer use. For shared ERP access, run one central server with authentication, central logging and controlled credentials so access can be revoked in one place.

#### How do I authenticate clients to the server?

**Answer:** Use the authentication method supported by your MCP clients and your identity provider, commonly OAuth based flows for HTTP servers. Verify the details against the MCP specification version in use rather than relying on shared static tokens.

#### What should trigger a rollback?

**Answer:** Define it in advance: a sustained error rate, an unapproved write, unexpected data exposure or evaluation failures after a change. Disabling write tools is a fast first step.

#### Do tool description changes need a release?

**Answer:** Yes. Descriptions steer the model, so a wording change can change which tool gets called. Version them, run the evaluation set and release them like code.

## Search terms

mcp server deployment runbook, mcp server production checklist, mcp deployment template, ai integration runbook template, erp api gateway runbook, mcp server rollback plan, mcp server operations document

---
Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json