@abscore/mcp-gateway

Security Proxy for Model Context Protocol (MCP)

ABS Core Runtime Enforcement Layer for Agentic Workflows.

@abscore/mcp-gateway is a high-authority security proxy that sits between your AI agents and their tools. It intercepts every tool call, validates it against deterministic policies, and produces cryptographic proof of every decision.

🚀 Quick Start

Initialize a new governance configuration in your project:

npx @oconnector/mcp-gateway init

Start the proxy server:

# Connects to your local ABS Core engine
npx @abscore/mcp-gateway start --engine http://localhost:8080

🛡️ Why use MCP Gateway?

1. Deterministic Enforcement: Move from "probabilistic" LLM safety to "deterministic" code-based governance.
2. Legally Admissible Proof: Every tool call is hashed and signed, creating an immutable audit trail.
3. Identity-Aware Tooling: Bind tool access to specific Agent IDs (OID) and User Roles.
4. Fail-Closed by Default: If the governance engine is unavailable, the tool call is blocked.

📦 Integration

LangChain

import { ABSCoreProxy } from '@abscore/mcp-gateway';

const proxy = new ABSCoreProxy({
  engineUrl: 'http://localhost:8080',
  policyId: 'finance-access-v1'
});

// Wrap your MCP client
const secureClient = proxy.wrap(mcpClient);

🛠️ Configuration

Configure your gates in abscore.config.json:

{
  "gates": ["identity", "risk", "privacy", "ledger"],
  "fail_strategy": "closed",
  "audit": {
    "enabled": true,
    "storage": "local-ledger"
  }
}

For more information, visit abscore.app or read the Institutional Data Room.