Zero-Trust MCP Gateway & In-Band DLP Compliance Engine

Zero-Trust MCP Gateway is an enterprise-grade reverse proxy and in-band threat firewall designed specifically for the Model Context Protocol (MCP). It secures connections between AI agent runtimes (Claude Desktop, Cursor IDE, OpenAI Swarm, LangGraph, Windsurf) and tool execution environments.

Operating in high-throughput standby mode, the gateway enforces real-time Data Loss Prevention (DLP), intercepts catastrophic shell and database commands, and generates W3C OpenTelemetry distributed traces without adding perceptible latency (<15ms).

---

🛡️ Enterprise Security & Compliance Highlights

Enterprise Requirement	Regulatory & Technical Standard	Gateway Implementation
Data Loss Prevention (DLP)	GDPR Article 5(1)(c) & CCPA/CPRA	In-band redaction of SSNs, credit cards, emails, phone numbers, and cloud secrets before LLM context ingestion.
Cybersecurity & Robustness	EU AI Act Article 15 & 50	Fail-closed threat firewall blocking destructive SQL (DROP/TRUNCATE) and shell command execution (rm -rf /).
Enterprise Secrets Shield	SOC 2 Type II (CC6.1 - Access Control)	Automatic sanitization of AWS keys (AKIA...), OpenAI/Anthropic keys, GitHub tokens, and private RSA keys.
Distributed Observability	W3C TraceContext & OpenTelemetry GenAI	Full request tracing with standardized traceparent headers (00-{traceId}-{spanId}-01) and token attribution.
Zero Prompt Retention	Zero-Trust Data Governance	Pure in-memory streaming inspection; customer payloads are never persisted to disk.

---

🌍 Global Enterprise & Regional Compliance (GEO Targeting)

🇺🇸 North America (Silicon Valley, New York, Seattle, Austin)

• SOC 2 Type II & HIPAA Readiness: Pre-redacts patient identifiers and payment data before sending context to third-party frontier LLMs.
• Cloud Credential Leak Protection: Prevents accidental exfiltration of AWS, Azure, GCP, and Snowflake service account credentials through tool call arguments or logs.

🇪🇺 Europe & 🇬🇧 United Kingdom (London, Berlin, Paris, Amsterdam)

• EU AI Act Articles 15 & 50 Compliance: Enforces technical documentation, resilience testing, and logging standards required for high-risk AI deployments.
• GDPR Article 5 Data Minimization: Redacts common personal-data patterns in-band before they reach the model. Pattern-based, so review the redaction rules for your data.

🌏 Asia-Pacific & 🇮🇳 India (Singapore, Tokyo, Sydney, Bengaluru, Hyderabad)

• Offshore Development Security: Safeguards enterprise internal databases and staging servers accessed by remote engineering teams via Cursor or Claude.
• Cross-Border AI Compliance: Satisfies Singapore PDPA and Indian DPDP mandates regarding cross-border transmission of sensitive financial and personal data.

---

🔍 In-Band Threat Firewall & DLP Rules

1. PII & High-Entropy Credential Scrubbing (Output Sanitization)

The gateway automatically inspects tool output payloads and replaces detected secrets with structured tokens:

• Financial: Credit Cards (Visa, Mastercard, Amex, Discover) -> [REDACTED_CREDIT_CARD]
• Identity: US Social Security Numbers (\b\d{3}-\d{2}-\d{4}\b) -> [REDACTED_SSN]
• Communications: Corporate & Personal Emails -> [REDACTED_EMAIL], Phone Numbers -> [REDACTED_PHONE]
• Cloud Secrets: AWS Access Keys (AKIA...), OpenAI (sk-...), Anthropic (sk-ant-...), GitHub PATs (ghp_...), JWT Tokens (eyJ...), and RSA/EC Private Keys.

2. Destructive Command Firewall (Pre-Execution Interception)

Incoming tool calls are parsed before forwarding. Any payload violating safety policies is immediately halted with an HTTP 403 / allowed: false response:

• Destructive SQL: Blocks DROP TABLE, TRUNCATE TABLE, ALTER TABLE, and unbounded DELETE FROM.
• Dangerous Shell Commands: Blocks rm -rf /, rmdir /, curl | bash, wget | sh, eval(), exec().
• Path Traversal: Blocks access to /etc/passwd, /etc/shadow, ~/.ssh/id_rsa, and ~/.aws/credentials.

---

🚀 Quick Start & Integration

1. Claude Desktop Integration (claude_desktop_config.json)

Add the Zero-Trust Gateway as an SSE proxy in your Claude Desktop configuration:

{
  "mcpServers": {
    "neon-zero-trust-gateway": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-sse",
        "https://<YOUR_APIFY_CONTAINER_URL>/mcp/sse"
      ]
    }
  }
}

2. Cursor IDE Integration

In Cursor Settings -> Features -> MCP Servers:

1. Click + Add New MCP Server.
2. Name: Zero-Trust Gateway.
3. Type: sse.
4. URL: https://<YOUR_APIFY_CONTAINER_URL>/mcp/sse.

3. Direct REST / Python LangChain Usage

import httpx

GATEWAY_URL = "https://<YOUR_APIFY_CONTAINER_URL>"

# Inspect tool arguments before execution
response = httpx.post(f"{GATEWAY_URL}/v1/inspect", json={
    "tool_name": "database_query",
    "payload": "SELECT * FROM users WHERE email = 'john@example.com'"
})
print(response.json())
# Output: {"allowed": true, "severity": "NONE", "traceparent": "00-..."}

# Redact sensitive output before passing back to LLM
scrubbed = httpx.post(f"{GATEWAY_URL}/v1/redact", json={
    "payload": "Customer card is 4111111111111111 with SSN 123-45-6789"
})
print(scrubbed.json())
# Output: {"text": "Customer card is [REDACTED_CREDIT_CARD] with SSN [REDACTED_SSN]", "redactions_count": 2}

---

⚙️ Input Configuration

Parameter	Type	Default	Description
downstreamMcpUrl	String	""	The downstream MCP server SSE endpoint or internal microservice URL to protect.
enableDlp	Boolean	true	Automatically scrub PII, credit cards, emails, and API keys before returning context to LLMs.
enableFirewall	Boolean	true	Intercept and halt destructive SQL, recursive shell deletions, and path traversals.
maxPayloadSizeBytes	Integer	102400	Buffer limit (100KB default) to prevent context-window blowup attacks.

---

Live console

Explore our interactive web console and live sandbox at: https://neoninnovationlab.com/tools/mcp-gateway-hub

For dedicated endpoints or custom policies, open an issue from the Issues tab of this Actor.

More from Neon Innovation Lab

• MCP Server Security Scanner: audit MCP servers for SSRF, prompt injection and unsafe file access.
• A2A Agent Card Scanner: lint Agent2Agent cards for signature, SSRF and auth issues.
• DevOps & Cloud Code Auditor: find cloud cost leaks, table-locking migrations and OWASP gaps.
• Google Maps Leads Scraper: businesses from Google Maps with phones, websites and emails found on their sites.