$ cat specs/mcp-zero-trust-security-gateway
MCP Zero-Trust Security Gateway
Declare–verify–confine gateway for MCP tool servers with per-tool seccomp-bpf filters and capability drift analysis.
- 84.6%
- runtime defence
- 100%
- containment
- 87.8%
- MCPTox score
Python · FastAPI · Docker · seccomp-bpf · Landlock
Architectural decisions and implementation
Gateway → Verifier → Profiler → Sandbox → Tool pipeline. Manifest inspection, Docker sandbox profiling (seccomp/strace), and declared-vs-observed capability drift analysis. Runtime proxy streams verdicts to a React dashboard.