Documentation
The gateway is one self-hosted Rust binary. It connects AI agents to developer tools over MCP, and it can govern the tool calls and model requests routed through it: inbound sign-in, a signed default-deny policy, brokered upstream credentials, approvals, content inspection and an audit journal. Each control applies when it is configured.
Where to start
Section titled “Where to start”- Evaluating security: read the security overview, then the OWASP MCP Top 10 assessment and the threat model.
- Planning a shared deployment: start with the shared deployment checklist, then configuration and the identity provider runbook.
- Governing model requests: see the inference path.
- Choosing integrations: see every integration and its tools.
About these pages
Section titled “About these pages”The reference pages are generated from the project’s documentation as it stands in the repository, so they change with the software. References to source files, tests and unpublished documents appear as plain text. Binaries and container images are available on request while public distribution is set up.