"author:xiaoy-ovo" matching MCP servers:

A policy-enforcing sandbox proxy that sits between an agent and an upstream MCP server, letting tool visibility, file paths, hostnames, credentials-looking arguments and timeouts be governed by a single TOML policy file before anything reaches the server. It exposes only the allowed tools, rejects disallowed calls with readable reasons, and writes one audit line per decision without logging argument values.