Secure Mcp Gateway
Description
Build secure mcp infrastructure to audit and control every data access by AI agents with minimal effort
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
Secure MCP Gateway - Enterprise-Grade Security & Management for Model Context Protocol Servers
[](LICENSE) [](https://www.docker.com/) [](https://modelcontextprotocol.io) [](https://openjdk.org/) [](https://golang.org/) [](https://www.typescriptlang.org/)
**Production-ready security gateway for Model Context Protocol (MCP) servers** with authentication, policy-based access control, tool filtering, and comprehensive audit logging for AI agents, Claude Desktop, VS Code, and custom LLM applications.
🌟 What is Secure MCP Gateway?
Secure MCP Gateway is an **enterprise-grade security and management layer** for [Model Context Protocol](https://modelcontextprotocol.io) servers, enabling organizations to safely expose MCP tools to AI agents, LLMs, and users while maintaining complete control over access, permissions, and compliance.
Why Use This Gateway?
**Without the Gateway:**
AI Agent → MCP Server → Unrestricted Tool Access ❌
- No authentication
- No authorization
- No audit trail
- No policy enforcement
- No tool filtering
- No centralized management
**With Secure MCP Gateway:**
AI Agent → Gateway (Auth + Policy + Audit) → Controlled MCP Access ✅
- ✅ JWT/OAuth2 Authentication - Keycloak integration
- ✅ Policy-Based Access Control - Fine-grained permissions per tool
- ✅ MCP Groups - Organize servers by team/role
- ✅ Tool Filtering - Restrict which tools users can access
- ✅ Audit Logging - Complete compliance trail
- ✅ STDIO to HTTP Conversion - Use any MCP server
- ✅ Web UI - Easy management interface
- ✅ Multi-Tenancy - Isolate access by user/tea
Related Skills
Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Google Workspace Alert Center
Manage security alerts
Security Related Agents
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,
Accessibility Audit
| You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive tec... | -