lasso-security/mcp-gateway

# Overview
MCP Gateway is an advanced intermediary solution for Model Context Protocol (MCP) servers that centralizes and enhances your AI infrastructure.
MCP Gateway acts as an intermediary between LLMs and other MCP servers. It:
1. 📄 Reads server configurations from a mcp.json file located in your root directory.
2. ⚙️ Manages the lifecycle of configured MCP servers.
3. 🛡️ Intercepts requests and responses to sanitize sensitive information.
4. 🔗 Provides a unified interface for discovering and interacting with all proxied MCPs.
5. 🔒 Security Scanner - Analyzes server reputation and security risks before loading MCP servers.
## Installation
### Python (recommended)
Install the mcp-gateway package:
bash
pip install mcp-gateway
> --mcp-json-path - must lead to your mcp.json or claudedesktopconfig.json
> --plugin or -p - Specify the plugins to enable (can be used multiple times)
### Usage
This example enables the basic guardrail for token masking and xetrack tracing plugin for filesystem MCP:
bash
mcp-gateway --mcp-json-path ~/.cursor/mcp.json -p basic -p xetrack
You can add more MCPs that will be under the Gateway by putting the MCP server configuration under the "servers" key.
Cursor example:
json
"mcpServers": {
"mcp-gateway": {
"command": "mcp-gateway",
"args": [
"--mcp-json-path",
"~/.cursor/mcp.json",
"--plugin",
"basic",
"--plugin",
"xetrack"
],
"servers": {
"filesystem": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-filesystem",
"."
Claude example:
Get
bash
which python
json
"mcpServers": {
"mcp-gateway": {
"command": " ",
"args": [
"-m",
"mcpgateway.server",
"--mcp-json-path",
" ",
"--plugin",
"basic"
],
"servers": {
"filesystem": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-filesystem",
"."
Docker
Build the image after clone this repo
bash
docker build -t mcp/gateway .
json
"mcpServers": {
"mcp-gateway": {
"command": "docker",
"args": [
"run",
"--rm",
"--mount", "type=bind,source=/Users/oro/Projects/playground/mcp-gateway,target=/app",
"-i",
"-v", "/Users/oro/.cursor/mcp.json:/config/mcp.json:ro",
"-e", "LASSOAPIKEY= ",
"-v", "mcp-gateway-logs:/logs",
"mcp/gateway:latest",
"--mcp-json-path", "/config/mcp.json",
"--plugin", "basic",
"--plugin", "lasso"
],
"servers": {
"filesystem": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-filesystem",
"."
In this example we use lasso and basic guardrail to show how we can pass enviroment varabile and arguments to the docker and how we can mount storage for the filesystem MCP.
The Docker image can be built with optional dependencies required by certain plugins (e.g., presidio).
Use the INSTALLEXTRAS build argument during the docker build command. Provide a comma-separated string of the desired extras: "presidio,xetrack"
## Quickstart
### Masking Sensitive Information
MCP Gateway will automatically mask the sensitive token in the response, preventing exposure of credentials while still providing the needed functionality.
1. Create a file with sensitive information:
bash
echo 'HFTOKEN = "hfokpaLGklBeJFhdqdOvkrXljOCTwhADRrXo"' > tokens.txt
2. When an agent requests to read this file through MCP Gateway:
Recommend to test with sonnet 3.7
Use your mcp-gateway tools to read the ${pwd}/tokens.txt and return the HFTOKEN