An MCP server that lets coding agents and child processes run against format-preserving phantom tokens in process.env, while real secrets are injected only inside a local edge proxy when the outbound host matches an allowlist. It also exposes blocked exfiltration attempts for auditing.
Policy-enforcing MCP proxy that blocks dangerous tool calls before they execute. Protects credentials, filesystem, shell, and databases across Claude Desktop, Cursor, Windsurf, and OpenClaw.
A secure MCP proxy server with JWT authentication, SQL guardrails, rate limiting, and Kafka audit logging, enabling enterprise-grade access control for MCP clients like Cursor and Claude Desktop.
Enables inspection and governance of enterprise ingested context by classifying security clearance tiers, sanitizing cross-department prompts, and enforcing role-based access boundaries to prevent data leaks. It runs as a zero-dependency MCP server compatible with Claude Desktop, Cursor, and other agent frameworks.