# ShiftLeft MCP Gateway

> MCP Gateway is a policy-enforcing proxy for Model Context Protocol (MCP) servers.
> It intercepts tool calls, generates SBOMs, scans for CVEs, detects secrets in payloads,
> enforces tool allow/deny policies, and emits signed audit events for every interaction.

## Product

ShiftLeft MCP Gateway governs AI tool access for engineering teams using AI coding assistants
(Claude, GitHub Copilot, Cursor, etc.) that support the Model Context Protocol.

## Key features

- **Local MCP protection**: Wraps stdio MCP servers as child processes and enforces policy
  from cached, cryptographically signed (ed25519) artifacts. Works offline.
- **HTTP MCP gateway**: Network-level proxy for remote MCP servers with per-tenant session
  isolation, security headers, and request timeouts.
- **SBOM scanning**: Trivy-based CycloneDX SBOM generation for Docker, npm, and pip MCP
  servers. CVE matching against OSV, GitHub Advisory DB, and NVD.
- **Secrets detection**: 40+ patterns including AWS, Azure, GCP keys, private keys, API
  tokens, and JWTs. Configurable per-server: warn, redact, or deny.
- **Tool audit trail**: Signed audit events for every tool call — tool name, subject,
  outcome, timestamp. Route to SIEM or retain locally.
- **Policy enforcement**: Per-subject (user/group/device) tool allow/deny lists. Policy
  artifacts signed and distributed offline. Grace period support for network outages.
- **Version monitoring**: Detects when a new version of an approved server is installed.
  Configurable hold period before the new version becomes active.

## Architecture

The gateway follows a ports-and-adapters (hexagonal) architecture with a clean data-plane /
control-plane separation. Gateways enforce from cached, signed policy artifacts and continue
to operate offline if the control plane is unreachable.

Components:
- **mcp-gateway-core**: Pure functional core — policy evaluation, payload scanning, audit schema
- **local-gateway**: Stdio proxy for workstation MCP servers
- **http-gateway**: Network proxy for remote HTTP MCP servers
- **policy-server**: Admin UI and API for tenant management, server approval, audit routing
- **control-plane**: Multi-tenant provisioning and lifecycle management
- **registry-server**: MCP Registry v0.1 implementation for server discovery
- **server-inspector**: Trivy-based SBOM and CVE scanning service

## Pricing

- **Free**: $0/month — 3 users, 4 approved servers, local gateway, 30-day audit retention
- **Pro**: $149/month — 25 users, unlimited servers, HTTP gateway, SBOM scanning, SIEM export, 1-year retention
- **Enterprise**: Custom — unlimited users, air-gap deployment, custom rules, dedicated SLA

## Sign up

Provision a free workspace at https://shiftleft.no — workspaces are ready in under 60 seconds.

## Contact

- Support: support@shiftleft.no
- Sales: sales@shiftleft.no
- GitHub: https://github.com/shiftleft-no