Skip to main content
Glama
aki83reo

Secure Agent MCP Gateway

by aki83reo

Secure Agent MCP Gateway

通过 MCP 到 MCP 的安全网关进行 SOC 告警分流:Agent 从不直接调用真实工具。每个 tools/list / tools/call 都会根据角色(viewer | operator | admin)进行范围限定和授权。

main.py (agent)  →  gateway  →  mcp_server (tools)

更多详情:gateway/README.md

快速开始(本地)

python -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt

cp .env.example .env
# edit .env — set LLM_API_KEY (never commit .env)

三种角色服务(本地)

# 1) Viewer — reputation lookups only
python main.py --mcp --role viewer --alert sample_alert.json

# 2) Operator — triage / summarize / notify (no block or escalate)
python main.py --mcp --role operator --alert sample_alert.json

# 3) Admin — full tool set through the gateway
python main.py --mcp --role admin --alert sample_alert.json

确定性路径(无 MCP / 无网关):

python main.py --alert sample_alert.json

仅策略检查:

python -m gateway.policy

Related MCP server: Nervora

Docker 部署

需要 Docker 与 Compose。密钥保留在镜像之外:

cp .env.example .env
# set LLM_API_KEY in .env

构建

docker compose build
# or:
docker build -t secure-agent-mcp-gateway:latest .

三个服务(每服务一个角色)

同一镜像,但 GATEWAY_ROLE 不同。每个容器为对应角色运行完整链路(maingatewaymcp_server)。

# 1) Viewer
docker compose run --rm triage-viewer

# 2) Operator
docker compose run --rm triage-operator

# 3) Admin
docker compose run --rm triage-admin

或按服务名启动:

docker compose up triage-viewer
docker compose up triage-operator
docker compose up triage-admin

无需文件即可传入密钥:

LLM_API_KEY=sk-... docker compose run --rm triage-admin

纯 Docker(无 Compose)

docker build -t secure-agent-mcp-gateway:latest .

docker run --rm \
  -e LLM_API_KEY \
  -e LLM_MODEL=gpt-4o-mini \
  -e GATEWAY_ROLE=viewer \
  secure-agent-mcp-gateway:latest \
  python main.py --mcp --role viewer --alert sample_alert.json

docker run --rm -e LLM_API_KEY -e GATEWAY_ROLE=operator \
  secure-agent-mcp-gateway:latest \
  python main.py --mcp --role operator --alert sample_alert.json

docker run --rm -e LLM_API_KEY -e GATEWAY_ROLE=admin \
  secure-agent-mcp-gateway:latest \
  python main.py --mcp --role admin --alert sample_alert.json

环境变量

变量

用途

LLM_API_KEY

Agent 与发现摘要所需

LLM_MODEL

默认 gpt-4o-mini

LLM_PROVIDER

默认 openai

GATEWAY_ROLE

viewer | operator | admin

.env 已被 git 忽略。只有 .env.example 会被提交。

角色(策略)

角色

可使用的工具

viewer

check_ip_reputation

operator

信誉、分流、摘要、通知

admin

所有工具,包括 block_ip + escalate_alert

定义于 gateway/policy.yaml

F
license - not found
Not graded
quality - not tested
C
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    Not graded
    quality
    C
    maintenance
    A secure MCP gateway for enterprise AI tool execution, enabling governed invocation of business tools with authentication, RBAC, audit logging, PII redaction, and async processing.
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    A zero-trust security gateway for MCP tool calls, inspecting tool identity, arguments, execution decisions, and returned content before risk reaches your coding agent.
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to securely call MCP tools with risk scoring, checkpoints, rollback, and approval workflows.
    134
    MIT

View all related MCP servers

Related MCP Connectors

  • Runtime permission, approval, and audit layer for AI agent tool execution.

  • Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.

  • Remote MCP for A2A caller identity, scope policy, verdict receipts, and audit history.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/aki83reo/secure-agent-mcp-gateway'

If you have feedback or need assistance with the MCP directory API, please join our Discord server