Case study / MVP ready

MCP Guardian

A pre-call policy gateway for MCP tool calls—allow, deny, redact, or require approval—with replayable audits.

01 / Problem

Problem

Trace platforms observe after the fact, but cannot stop a dangerous shell command, path escape, or secrets in HTTP args.

02 / Approach

Local gateway MCP middleware with one-shot Cursor/Codex install. Risky calls pause for in-chat guardian_decide. Web is intro/FAQ only.

03 / Current proof

bash scripts/install.sh; in-session approval; repeatable A1–A8. See Work → MCP Guardian.