portcullis
A policy gateway between AI agents and their tools
Credentials redacted, injected instructions fenced, hidden Unicode decoded and stripped, every decision audited.
A Rust gateway for the Model Context Protocol. It sits between an agent and its MCP servers, refuses any tool call its policy did not permit, reads tool output before the model does to redact credentials and fence off injected instructions, and writes an audit record for every decision. Default deny, 224 tests, CI on Linux, Windows and macOS.
- Rust
- Tokio
- MCP
- JSON-RPC
- TOML policy
- GitHub Actions