A
licenseNot graded
qualityB
maintenanceAn MCP policy proxy that sits between AI agents and their upstream MCP servers to enforce hard spend and blast-radius caps, human approvals for destructive tools, a kill switch, scoped per-agent credentials, dry-run writes with mutation diffs, semantic loop breaking, and a hash-chained audit log. It also offers hook mode that applies the same policy to coding agents' own shell commands and file edits.
MIT