Register a new downstream MCP server with Sentinel Gateway. The gateway will discover all tools, fingerprint their descriptions, and begin monitoring for drift.

List all registered downstream MCP servers and their connection status.

List all discovered tools across all registered servers, with their fingerprint status and trust level.

Quick setup: Register all 3 demo mock servers (filesystem, CRM, email) with the gateway in one step. Useful for demo initialization.

Grant an agent access to a specific tool on a specific server. Use toolName="*" to grant access to all tools on that server.

Revoke an agent's access to a specific tool.

List all RBAC policy rules. Optionally filter by agent ID.

Test whether a specific agent is allowed to call a specific tool. Returns the policy decision and reason.

Quick setup: Create demo RBAC policies for demonstration. Grants "sales-bot" access to CRM and email, "data-analyst" access to filesystem, and leaves "rogue-agent" with no access.

Route a tool call through Sentinel Gateway's security pipeline. The gateway verifies tool integrity (fingerprint check), enforces RBAC policy, logs to the provenance ledger, and only then forwards the call to the downstream MCP server.

Search and filter the provenance ledger. Returns cryptographically linked entries with hash-chain validation.

Verify the cryptographic integrity of the entire provenance ledger. Each entry is hash-chained to the previous one — if any entry has been tampered with, this check will detect it.

Get summary statistics for the Sentinel Gateway dashboard — total calls, blocks, drift detections, chain status.

Get recent tool call history through the gateway, with status and timing information.

Get all items in the human review queue. Shows pending drift detections, injection flags, and policy violations that need human approval.

Approve a review item. For drift detections, this re-pins the tool fingerprint with the new description. For injection flags, this allows the call to proceed.

Deny a review item. The block remains active — the flagged tool/call stays blocked.

Run a simulated attack scenario to demonstrate Sentinel Gateway's security capabilities. Scenarios: tool_poisoning (rewrites a tool description), rbac_violation (unauthorized agent call), ledger_tampering (modifies a ledger entry), description_injection (hidden instructions in tool description).

Reset all mock servers to their original, clean state after running attack simulations.

Run the complete demo sequence: setup servers → configure policies → normal traffic → tool poisoning attack → RBAC violation. Shows the full security pipeline in action.