Open-source MCP proxy for AI agent access control with CEL policies, RBAC, and audit.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"open-source-mcp-proxy-for-ai-agent-access-control-with-cel-policies-rbac-and-audit": {
"command": "<see-readme>",
"args": []
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Every tool call, shell command, and file read — unchecked. SentinelGate intercepts every action before it executes. Deterministic rules. From bare metal to any container or sandbox.
No automated test available for this server. Check the GitHub README for setup instructions.
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security
An evil MCP server used for redteam testing
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.
mcpki-server is the backend infrastructure for https://www.mcpki.org, enabling secure public key management and autonomous certificate handling for large language models (LLMs).
MCP Security Weekly
Get CVE alerts and security updates for Open-source MCP proxy for AI agent access control with CEL policies, RBAC, and audit. and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Your AI agent has unrestricted access to your machine.
Every tool call, shell command, and file read — unchecked.
SentinelGate intercepts every action before it executes.
Deterministic rules. From bare metal to any container or sandbox.
For developers who give AI agents MCP tool access — and need to control it.
Get Started · Website · Docs
AI agents don't just chat — they read files, run commands, call APIs, and send data externally. One prompt injection or one hallucinated action is enough to leak credentials, delete data, or exfiltrate sensitive information. And there's no undo.
🎣 Prompt injection via external content
You ask: *"Triage the latest GitHub issues and su