Skip to main content
Glama
Lekha-2023

MCP Engineering Agent

by Lekha-2023

MCP Engineering Agent

A security-first engineering agent demonstrating an MCP-style JSON-RPC tool boundary. It separates model orchestration from typed tools, authorization, and audit events.

Architecture

User -> Agent -> JSON-RPC/MCP Boundary -> Tool Registry -> Authorization -> Tool
                                                    `-> Audit Event

Related MCP server: Enterprise MCP Gateway and Tool Registry

What this demonstrates

  • tools/list and tools/call JSON-RPC methods

  • Typed tool registration and discovery

  • Role-based authorization before tool execution

  • Read-only vs write-capable tool separation

  • UTC audit events for every authorization decision

  • Framework-light design that is easy to extend to a full MCP server

Why it matters

Agentic systems become risky when an LLM can directly execute arbitrary actions. This project treats tools as a privileged interface with explicit schemas and authorization boundaries.

Run

pip install -e '.[dev]'
python -m app.server
pytest -q

No real credentials or external systems are required for the demo.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    Security-enforcing MCP proxy that sits between an AI agent and any number of downstream MCP servers, intercepting every tool call through a capability-token policy gateway that can allow, deny, or escalate to human approval before the call reaches any real tool. It also exposes built-in operator tools for approval workflows, audit trail queries, token management, voice/HUD output, and hierarchical
    21
    13
    Apache 2.0
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables controlled AI-agent access to enterprise-shaped tools with a deny-by-default gated write path, human approval, dry-run execution, and append-only audit logging.
    1
    -
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to securely discover, execute, and observe tools with role-based access control and audit logging. Serves tools over MCP stdio and HTTP for integration with Claude Desktop, Cursor, and other clients.
    1
    -