Security & Authorization

The MCP Gateway

A centralized security hub for the Model Context Protocol. It handles OAuth2 token validation, fine-grained access control, and real-time request/response transformation.


Key Feature

Access Control & Transformation

Beyond simple yes/no authorization, the MCP Auth Gateway leverages Obligations to modify data on the fly. This ensures that agents only see what they are allowed to see, and backends only receive sanitized inputs.

Transformation Visualization

Why Transformation Matters

In an AI-driven world, the "Least Privilege" principle must apply to data visibility. Transformations allow you to provide the context an agent needs without exposing sensitive details.

Scalable Security Filters

Redacting sensitive data within every response is computationally expensive and often inefficient. When handling paginated results or massive datasets, post-processing becomes a bottleneck. Applying a security filter at the request level is the scalable way to ensure data sovereignty without sacrificing performance.

Performance-First Security

Request Transformation

Sanitize tool parameters before they reach your upstream servers and enforce security filters.

SELECT name, ssn, salary FROM employees

=>


SELECT name, '***-**-****' as ssn, salary FROM employees WHERE dept='HR'

Response Transformation

Protect your data from being leaked to the LLM. Mask PII and bridge data formats for compatibility.

{
"credit_card": "1111-2222-3333-6666"
}
=>
{
"creditCard": "****-****-****-6666"
}
Capabilities

Key Features

OAuth Token Validation

Supports local JWT validation (JWKS/Public Key) and Token Introspection for seamless enterprise integration.

Access Control

Fine-grained tool-level permissions based on user context, resource attributes, and requested actions.

Full Auditing

Complete traceability with real-time audit streams capturing user identity, tool calls, and transformed results.