Skip to main content
Glama

Nexus-MCP ⚔


Overview

Nexus-MCP is an enterprise-grade Model Context Protocol (MCP) gateway and security router that gives AI agents (Claude Desktop, Cursor, LangGraph) secure, observable access to internal corporate knowledge.

Raw MCP implementations lack multi-tenancy, dynamic RBAC, tool injection protection, and audit logs. Nexus-MCP bridges this gap by acting as a zero-trust security router and document intelligence server.


Related MCP server: evav-gateway

šŸ” The Enterprise Golden Path

MCP Client ──> Authentication & Tenant Context ──> RBAC Scope Check
                                                          │
                                                          ā–¼
Prometheus & OTel ◄── Response ◄── Schema Extraction ◄── Hybrid RAG (Vector+BM25)

Key Features

  • ⚔ Official Anthropic MCP SDK Integration: Built natively on Anthropic's mcp specification supporting STDIO & SSE JSON-RPC transports.

  • šŸ”’ Multi-Tenant & ACL Isolation: Strictly isolates document search and schema extraction per tenant_id and user acl_groups.

  • šŸ›”ļø Security Router & Prompt Injection Sanitizer: Prevents prompt/tool injection attacks (DROP TABLE, IGNORE INSTRUCTIONS).

  • šŸ” Hybrid Vector + BM25 Retrieval: Reciprocal Rank Fusion (RRF) combining dense vector similarity and BM25 term frequency.

  • šŸ“Š Prometheus & OpenTelemetry Observability: Tracks tool execution counts, p95/p99 latency, and token expenditure.


Quick Start

Installation

pip install nexus-mcp

Or install locally for development:

git clone https://github.com/JasleenSingh/nexus-mcp.git
cd nexus-mcp
pip install -e .

Code Example: Golden Path Demo

Run the included commercial contract intelligence demo:

python examples/contract_intelligence_demo.py

Output:

šŸš€ Starting Nexus-MCP Enterprise Golden Path Demo...
āœ… Ingested document into 4 hierarchical chunks for tenant 'tenant-acme-corp'.

šŸ” Executing Tool [doc_hybrid_search]...
  Found 1 matching chunks with Hybrid Vector + BM25 search.

šŸ“‹ Executing Tool [doc_extract_schema]...
  Extracted Agreement Schema (3 fields):
   • payment_terms: Net 30 days (confidence: 0.92)
   • total_contract_value: $3,500,000.00 (confidence: 0.88)
   • governing_law: State of Delaware (confidence: 0.90)

šŸ“Š Executing Tool [system_health_telemetry]...
  System Health: healthy

✨ Nexus-MCP Golden Path Execution Completed Successfully!

Running Server & CLI

# Start Nexus-MCP server over STDIO transport
nexus-mcp serve --transport stdio

Running Tests & Benchmarks

# Run complete unit, integration, and security test suite
pytest tests/

# Run retrieval accuracy benchmarks (Recall@K & MRR)
pytest tests/integration/test_retrieval_benchmarks.py -v

Project Structure

nexus-mcp/
ā”œā”€ā”€ src/nexus_mcp/
│   ā”œā”€ā”€ models/             # Pydantic v2 domain schemas (TenantContext, DocumentChunk, SearchQuery)
│   ā”œā”€ā”€ document_processor/ # Hierarchical chunker, schema extractor, and Hybrid RAG retriever
│   ā”œā”€ā”€ security/           # RBAC scope validator and input injection sanitizer
│   ā”œā”€ā”€ observability/      # Prometheus metrics and OpenTelemetry trace span exporters
│   ā”œā”€ā”€ mcp_server/         # Official Anthropic MCP Server & tool registrations
│   └── cli/                # Rich CLI interface (nexus-mcp serve)
ā”œā”€ā”€ tests/
│   ā”œā”€ā”€ unit/               # Unit tests (chunker, retriever, schemas, observability)
│   ā”œā”€ā”€ integration/        # MCP JSON-RPC protocol & retrieval benchmarks
│   └── security/           # Adversarial security tests (cross-tenant & prompt injection)
ā”œā”€ā”€ examples/               # Contract intelligence demo & sample commercial agreements
ā”œā”€ā”€ docs/                   # System architecture & tool specs
ā”œā”€ā”€ pyproject.toml
└── README.md

License

Distributed under the MIT License.

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    B
    maintenance
    A zero-trust gateway for securely brokering interactions between AI models and internal tools via the Model Context Protocol, with DLP, prompt injection defense, and LLM-as-a-Judge.
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    Governed MCP gateway that lets AI agents call tools with policy enforcement, prompt-injection screening, a kill-switch, and tamper-evident signed audit logs.
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Provides a self-hosted knowledge index with document-level permissions, enabling AI agents to retrieve exactly the documents they are authorized to see via MCP. Supports OAuth 2.1, custom embedding models, and runs inside your network.
    38 npm
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Universal MCP router and gateway that bridges LLM agents to OpenAPI, GraphQL, and AWS Lambda services with ISO/IEC 42001 AI governance, RBAC, PII redaction, semantic tool routing, and a web dashboard.
    MIT