MCP Enterprise Gateway
Enables n8n workflows to trigger MCP tools through the gateway, providing access to enterprise databases with security and audit logging.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@MCP Enterprise GatewayShow me the latest 10 users from the enterprise DB, redacting sensitive columns."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP Enterprise Gateway
A production-grade MCP (Model Context Protocol) proxy server with enterprise security features including JWT authentication, SQL AST guardrails, Kafka audit logging, and rate limiting.
Architecture
┌─────────────────┐ ┌──────────────────────────────────────────────────────┐
│ Cursor IDE / │────▶│ MCP Enterprise Gateway │
│ Claude Desktop │ │ ┌─────────────┐ ┌─────────────┐ ┌──────────┐ │
│ n8n Workflow │ │ │ JWT Auth │ │ Rate Limit │ │ SQL AST │ │
└─────────────────┘ │ │ Middleware │─▶│ (Redis) │─▶│ Guardrails│ │
│ └─────────────┘ └─────────────┘ └──────────┘ │
│ │ │ │
│ ▼ ▼ │
│ ┌─────────────┐ ┌──────────┐ │
│ │ PostgreSQL │◀────────────────────│ Kafka │ │
│ │ (Telemetry) │ │ (Audit) │ │
│ └─────────────┘ └──────────┘ │
└──────────────────────────────────────────────────────┘Related MCP server: mcp-guardian
Features
Phase 1: Security & Identity
JWT Verification - All requests require valid Bearer token
Role-Based Access Control - 5 roles:
admin,senior_analyst,junior_analyst,hr_admin,readonlyRedis Rate Limiting - Sliding window rate limits (100 req/min per user)
Phase 2: SQL AST Guardrails
Blocks destructive operations:
DROP,DELETE,TRUNCATE,ALTEREnforces table-level access policies
Column-level PII redaction
Automatic
LIMITinjection for SELECT queries
Phase 3: Observability
/healthz- Basic liveness check/readyz- Full dependency check (PostgreSQL + Kafka)Kafka audit events for all query attempts
Quick Start
# Start all services
docker-compose up --build -d
# Verify health
curl http://localhost:3000/healthz
curl http://localhost:3000/readyz
# Get SSE connection (requires JWT)
curl -N http://localhost:3000/sse \
-H "Authorization: Bearer <YOUR_JWT_TOKEN>"
# Send tool call
curl -X POST "http://localhost:3000/message?sessionId=<SESSION_ID>" \
-H "Authorization: Bearer <YOUR_JWT_TOKEN>" \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "query_enterprise_db",
"arguments": {
"sql": "SELECT * FROM users LIMIT 10;",
"userRole": "admin"
}
}
}'Environment Variables
Variable | Default | Description |
|
| HTTP server port |
|
| PostgreSQL connection string |
|
| Kafka broker address |
| (required) | JWT signing secret |
|
| Redis for rate limiting |
Table Access Policies
Table | Allowed Roles | Blocked Columns |
| admin, hr_admin | ssn, credit_card_no, bank_account_no |
| admin | password_hash, salt |
| admin, hr_admin | credit_card_no, tax_id, passport_no |
| all | - |
| all | password |
Client Integrations
Cursor IDE
# Copy config
cp integrations/.cursor/mcp.json ~/.cursor/mcp.jsonClaude Desktop
Edit ~/.claude_desktop_config.json:
{
"mcpServers": {
"enterprise-gateway": {
"transport": "sse",
"url": "http://localhost:3000/sse"
}
}
}n8n Workflow
Import integrations/n8n/mcp-trigger.json and set MCP_GATEWAY_TOKEN environment variable.
Generate JWT Token
const jwt = require('jsonwebtoken');
const token = jwt.sign(
{ sub: 'user_123', role: 'admin', email: 'admin@corp.com' },
'super_secret_enterprise_key_2026',
{ expiresIn: '24h' }
);
console.log(token);Development
# Local development
npm install
npm run dev
# Run tests
npm test
# Type check
npx tsc --noEmitThis server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- Alicense-qualityDmaintenanceAn enterprise infrastructure layer for the Model Context Protocol that provides authentication, RBAC, audit logging, and rate limiting for tool calls. It acts as a secure proxy between AI agents and MCP servers to ensure security and compliance in production environments.30MIT
- AlicenseAqualityAmaintenanceSecurity, cost, and health governance proxy for MCP infrastructure. Enforces YAML-configurable security policies (blocklists, rate limits, token budgets), tracks real token costs via tiktoken, monitors server health with live JSON-RPC probes. Features OAuth 2.1/OIDC with RBAC, web dashboard, payload normalization, semantic shell AST analysis, mTLS, and a formal STRIDE threat model.43653MIT
- Alicense-qualityCmaintenanceMCP server for AI agent security guardrails. Provides input validation, prompt injection detection, PII redaction, output filtering, policy enforcement, rate limiting, and comprehensive audit logging.461MIT
- Flicense-qualityDmaintenanceA production-ready MCP OAuth 2.1 server implementation with analytics and security monitoring, enabling secure authentication for MCP clients like Claude Desktop and Cursor.4
Related MCP Connectors
An MCP server for Arcjet - the runtime security platform that ships with your AI code.
Hosted MCP server for LLM cost estimation, model comparison, and budget-aware routing.
Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/aakarsh1227/Gateway-Project-using-N8N'
If you have feedback or need assistance with the MCP directory API, please join our Discord server