"author:pavansky" matching MCP servers:

Sits in front of any other MCP server and decides, outside the model, whether each tool call goes straight through, waits for a named person to approve it, or is refused. Adds one-time approval claims, step-derived idempotency keys, read-after-write verification and a hash-chained audit log so agents can propose writes safely.