Secure Agent MCP Gateway
Secure Agent MCP Gateway
通过 MCP 到 MCP 的安全网关进行 SOC 告警分流:Agent 从不直接调用真实工具。每个 tools/list / tools/call 都会根据角色(viewer | operator | admin)进行范围限定和授权。
main.py (agent) → gateway → mcp_server (tools)更多详情:gateway/README.md。
快速开始(本地)
python -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
cp .env.example .env
# edit .env — set LLM_API_KEY (never commit .env)三种角色服务(本地)
# 1) Viewer — reputation lookups only
python main.py --mcp --role viewer --alert sample_alert.json
# 2) Operator — triage / summarize / notify (no block or escalate)
python main.py --mcp --role operator --alert sample_alert.json
# 3) Admin — full tool set through the gateway
python main.py --mcp --role admin --alert sample_alert.json确定性路径(无 MCP / 无网关):
python main.py --alert sample_alert.json仅策略检查:
python -m gateway.policyRelated MCP server: Nervora
Docker 部署
需要 Docker 与 Compose。密钥保留在镜像之外:
cp .env.example .env
# set LLM_API_KEY in .env构建
docker compose build
# or:
docker build -t secure-agent-mcp-gateway:latest .三个服务(每服务一个角色)
同一镜像,但 GATEWAY_ROLE 不同。每个容器为对应角色运行完整链路(main → gateway → mcp_server)。
# 1) Viewer
docker compose run --rm triage-viewer
# 2) Operator
docker compose run --rm triage-operator
# 3) Admin
docker compose run --rm triage-admin或按服务名启动:
docker compose up triage-viewer
docker compose up triage-operator
docker compose up triage-admin无需文件即可传入密钥:
LLM_API_KEY=sk-... docker compose run --rm triage-admin纯 Docker(无 Compose)
docker build -t secure-agent-mcp-gateway:latest .
docker run --rm \
-e LLM_API_KEY \
-e LLM_MODEL=gpt-4o-mini \
-e GATEWAY_ROLE=viewer \
secure-agent-mcp-gateway:latest \
python main.py --mcp --role viewer --alert sample_alert.json
docker run --rm -e LLM_API_KEY -e GATEWAY_ROLE=operator \
secure-agent-mcp-gateway:latest \
python main.py --mcp --role operator --alert sample_alert.json
docker run --rm -e LLM_API_KEY -e GATEWAY_ROLE=admin \
secure-agent-mcp-gateway:latest \
python main.py --mcp --role admin --alert sample_alert.json环境变量
变量 | 用途 |
| Agent 与发现摘要所需 |
| 默认 |
| 默认 |
|
|
.env 已被 git 忽略。只有 .env.example 会被提交。
角色(策略)
角色 | 可使用的工具 |
|
|
| 信誉、分流、摘要、通知 |
| 所有工具,包括 |
定义于 gateway/policy.yaml。
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to discover and execute tools via a secure MCP server with JWT authentication, RBAC, rate limiting, and audit logging.1MIT
- AlicenseNot gradedqualityCmaintenanceA secure MCP gateway for enterprise AI tool execution, enabling governed invocation of business tools with authentication, RBAC, audit logging, PII redaction, and async processing.Apache 2.0
- AlicenseNot gradedqualityAmaintenanceA zero-trust security gateway for MCP tool calls, inspecting tool identity, arguments, execution decisions, and returned content before risk reaches your coding agent.Apache 2.0

AgentsGateofficial
AlicenseNot gradedqualityAmaintenanceEnables AI agents to securely call MCP tools with risk scoring, checkpoints, rollback, and approval workflows.134MIT
Related MCP Connectors
Runtime permission, approval, and audit layer for AI agent tool execution.
Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.
Remote MCP for A2A caller identity, scope policy, verdict receipts, and audit history.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/aki83reo/secure-agent-mcp-gateway'
If you have feedback or need assistance with the MCP directory API, please join our Discord server