Skip to main content
Glama

Accord

Give agents access. Keep control.

An MCP gateway and control-plane developer preview by Eden Builds.

Available

Animated marketing site; local policy simulator using a shared deterministic engine; JSON payload projection and exports; session receipts; public read-only MCP tools; a configurable loopback gateway with scoped tool visibility, bearer authentication, process-local budgets, circuit breaking, schema validation, and metadata logs.

Related MCP server: border-patrol-mcp

Run

Node.js 22+.

npm ci
npm run dev
npm test
npm run typecheck
npm run build

Public MCP endpoint: https://mcp.edenbuilds.me/mcp. Tools: accord_describe, accord_evaluate. No upstream business systems are connected to this endpoint.

Local gateway

export ACCORD_GATEWAY_TOKEN="$(openssl rand -hex 32)"
npm run gateway

Configure your MCP client for http://127.0.0.1:4318/mcp with its secure bearer-header configuration. The default gateway/example.json forwards to the public read-only preview. Override ACCORD_CONFIG for another configuration file. Upstream credentials are environment references via tokenEnv; do not commit credentials. Policies use namespaced exact tool names.

Boundaries

The public site is a developer preview, not a hosted enterprise service. Hosted tenancy, durable quotas, OAuth brokering, billing, persistent approvals/audit export, semantic caching, fleet management, and compliance assurance are planned. The local gateway is single-process, loopback-only, and designed for trusted evaluation upstreams. Its counters reset on restart. Workbench samples are fictional and labeled. No model is called.

See security and the full strategy before extending the gateway.

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    C
    maintenance
    Policy enforcement gateway for MCP tool calls, evaluating every tool invocation against declarative YAML policies (allow/deny/escalate-to-human), generating cryptographic hash-chained audit receipts, and including built-in content safety scanning.
    2
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A policy-enforcing MCP gateway that intercepts all tool calls to downstream MCP servers, applying allow/deny/ask rules with human approval and audit logging for safe access to dangerous tools.
    2 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Governed MCP gateway that lets AI agents call tools with policy enforcement, prompt-injection screening, a kill-switch, and tamper-evident signed audit logs.
    Apache 2.0