Access Control & Transformation
Beyond simple yes/no authorization, the MCP Auth Gateway leverages Obligations to modify data on the fly. This ensures that agents only see what they are allowed to see, and backends only receive sanitized inputs.
Why Transformation Matters
In an AI-driven world, the "Least Privilege" principle must apply to data visibility. Transformations allow you to provide the context an agent needs without exposing sensitive details.
Scalable Security Filters
Redacting sensitive data within every response is computationally expensive and often inefficient. When handling paginated results or massive datasets, post-processing becomes a bottleneck. Applying a security filter at the request level is the scalable way to ensure data sovereignty without sacrificing performance.
Request Transformation
Sanitize tool parameters before they reach your upstream servers and enforce security filters.
=>
SELECT name, '***-**-****' as ssn, salary FROM employees WHERE dept='HR'
Response Transformation
Protect your data from being leaked to the LLM. Mask PII and bridge data formats for compatibility.
"credit_card": "1111-2222-3333-6666"
}
=>
{
"creditCard": "****-****-****-6666"
}