MCP Engineering Agent
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@MCP Engineering AgentShow the audit log for today's authorization decisions."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP Engineering Agent
A security-first engineering agent demonstrating an MCP-style JSON-RPC tool boundary. It separates model orchestration from typed tools, authorization, and audit events.
Architecture
User -> Agent -> JSON-RPC/MCP Boundary -> Tool Registry -> Authorization -> Tool
`-> Audit EventRelated MCP server: Enterprise MCP Gateway and Tool Registry
What this demonstrates
tools/listandtools/callJSON-RPC methodsTyped tool registration and discovery
Role-based authorization before tool execution
Read-only vs write-capable tool separation
UTC audit events for every authorization decision
Framework-light design that is easy to extend to a full MCP server
Why it matters
Agentic systems become risky when an LLM can directly execute arbitrary actions. This project treats tools as a privileged interface with explicit schemas and authorization boundaries.
Run
pip install -e '.[dev]'
python -m app.server
pytest -qNo real credentials or external systems are required for the demo.
This server cannot be deployed
Maintenance
Related MCP Connectors
Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.
Control plane for autonomous software labor. Agents claim objectives over MCP with audit trail.
Runtime permission, approval, and audit layer for AI agent tool execution.
Identity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.
Related MCP Servers
- AlicenseAqualityAmaintenanceSecurity-enforcing MCP proxy that sits between an AI agent and any number of downstream MCP servers, intercepting every tool call through a capability-token policy gateway that can allow, deny, or escalate to human approval before the call reaches any real tool. It also exposes built-in operator tools for approval workflows, audit trail queries, token management, voice/HUD output, and hierarchical2113Apache 2.0
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to discover and execute tools via a secure MCP server with JWT authentication, RBAC, rate limiting, and audit logging.1MIT
- FlicenseNot gradedqualityCmaintenanceEnables controlled AI-agent access to enterprise-shaped tools with a deny-by-default gated write path, human approval, dry-run execution, and append-only audit logging.1-
- FlicenseNot gradedqualityBmaintenanceEnables AI agents to securely discover, execute, and observe tools with role-based access control and audit logging. Serves tools over MCP stdio and HTTP for integration with Claude Desktop, Cursor, and other clients.1-