Securely Exposing a Stateful MCP Server on Cloud Run (n8n Playwright MCP Example)
A developer details a multi-layered security architecture for exposing a stateful Playwright MCP server on Cloud Run, enabling n8n workflows to automate Google-login pages like Looker Studio across teams. The solution uses ingress internal, IAM roles/run.invoker, Google-signed ID tokens, a Go auth-proxy verifying per-team Mcp-Auth-Key, and Secret Manager for storage state. Stateful sessions are preserved by setting maxScale=1 to prevent scale-out.