MCP gateway
One gateway in front of every tool call.
Point your agents at the gateway instead of the tool. It checks identity, inspects the payload, applies your policy, and answers allow, deny, or hold, all on the request path and all in under 100 milliseconds.
Drop-in · default-deny allowlist · decision in <100ms
{
"mcpServers": {
"your-server": {
"command": "npx @axiorank/mcp-gateway",
"env": { "AXR_KEY": "axr_live_…" }
}
}
}Drop-in
No agent rewrite. Just a new address.
Route tool calls through the gateway with the SDK or a single HTTP call. The same one-line change governs the agents you run and verifies the agents that visit you.
import { AxioRank } from "@axiorank/sdk";
const axio = new AxioRank({ apiKey: process.env.AXR_KEY });
const { decision, risk } = await axio.toolCall({
tool: "db.query",
arguments: { sql },
});
if (decision !== "allow") throw new Error("blocked by the gateway");Both directions
The hot path
Watch a call travel the pipeline.
Pick an example call and step through it. The score and the verdict are computed in your browser by the same functions the gateway runs in production.
- Validate
- Identity
- Score
- Policy
- Egress
- Audit
- Quota
- Decision
Tool allowlist
Default-deny per server, pinned against silent changes.
Allow exactly the tools each server should expose. Pin the set so a server that quietly adds a dangerous tool is denied until you approve the change.
A connected server can change its tool list at any time. Default-deny means a new tool is blocked until you allow it, so a quiet expansion never becomes a quiet escalation.
Pinned against a rug pull
- repos.read
- issues.read
- issues.write
- repos.deletedenied · not allowed
Secrets broker
Your agents never hold the credential.
Store an upstream credential once. The gateway injects it into the request at call time, bound to a target host, and it never reaches your agent or your audit log.
What your agent sends
POST /api/orders
{ "item": "SKU-204" }What reaches the upstream
POST /api/orders
Authorization: Bearer «injected, bound to host»
{ "item": "SKU-204" }Record and limit
Every decision is logged, redacted, and counted.
The same pass that decides the call also records it and meters it, with no extra round trips.
Keep exploring
Continue across the control plane.
Put a gateway in front of every tool call.
Drop in the SDK or point your MCP client at the gateway, and govern the agents you run and the agents that visit you from one place.