Stop dangerous tool calls before they reach production
Secure your agentsWhen you deploy AI agents to production, you're trusting them to call external tools and APIs. But agents are fast and sometimes wrong. They call endpoints that don't exist, pass malformed arguments, or invoke actions they shouldn't (deleting records, transferring funds, exposing secrets).
Build your own gating layer and you'll spend months maintaining it. Let it fail and you'll spend years explaining the breach.
Define which MCP servers your agents can reach, which tools they can call, and what arguments are allowed. Rules are code or config.
The proxy sits between your agent and the MCP server. Every tool call is checked against your rules in under 100ms. Violations are blocked.
Every call, allowed or blocked, lands in your audit log. Search by agent, tool, time, or rule violation. Export for compliance.
Security: Prevent agents from calling the wrong tools or APIs by accident or drift.
Compliance: PCI, HIPAA, SOC 2 auditors ask: which tools can your agents access? Prove it with the audit log.
Observability: See exactly which tools your agents are calling. Detect anomalies. Spot when an agent starts calling a tool it never did before.
The proxy is a lightweight Go binary. Point it at your MCP server, define your rules in YAML, and run it. Agents connect to the proxy instead of the server directly. No code changes to your agent framework.
mcp-gating-proxy --rules rules.yaml --mcp-endpoint localhost:9090
Free: up to 1 MCP server, basic audit log retention (7 days). Open source.
Pro: $99/month. Unlimited servers, full audit retention, team dashboard, API access to audit log, email support.
Enterprise: Custom. Deployment options (on-prem, VPC), SLA, TAM, onboarding.
No. The proxy is under 100ms per call on average, and fully parallelizable. Most teams don't notice any latency.
No. Rules are centralized. One rule set gates all agents that connect to that MCP server.
Yes. The proxy has a dry-run mode. Test your rules against real tool calls without blocking anything.
Start free. Upgrade when you're ready. Deploy in minutes.
Get startedRegister interest
This is not a purchase and there is no card field. It puts your address, this product, and whatever you write below in front of a person, and you get a written answer about what finishing it, or handing it over for you to run yourself, would actually take.