Secure MCP Gateway

🚀 Enkrypt AI Secure MCP Gateway

The Enkrypt AI Secure MCP Gateway is a powerful tool that sits between MCP clients and servers. It offers features like authentication, dynamic tool discovery, caching, and guardrail enforcement, enhancing security and usability for MCP interactions.

🚀 Quick Start

The Enkrypt AI Secure MCP Gateway is designed to provide a secure and efficient way to interact with MCP servers. It offers features such as authentication, dynamic tool discovery, caching, and guardrail enforcement.

Prerequisites

• Install Git 2.43 or higher.
• Install Python 3.11 or higher and ensure it's accessible via the command line.
• Install pip 25.0.1 or higher.
• Install uv 0.7.9 or higher.
• Install Claude Desktop from their website and log in.
• Install any dependencies required for the MCP servers you want to proxy requests to.
• (Optional) Install and run a cache server like KeyDB if you want to cache externally.

Local Installation

1. Clone the repo, setup virtual environment and install dependencies

   git clone https://github.com/enkryptai/secure-mcp-gateway
   cd secure-mcp-gateway
   

   Activate a virtual environment:

   uv init
   uv venv
   # For Windows
   .\.venv\Scripts\activate
   # For Linux/Mac
   source ./.venv/Scripts/activate
   python -m ensurepip
   python -m pip install uv
   uv pip install -r requirements.txt
   mcp version
   

2. Run the setup script

   # On Linux/Mac
   cd scripts
   chmod +x *.sh
   ./setup.sh
   # On Windows
   cd scripts
   setup.bat
   # Restart Claude Desktop
   

3. Verify the installation Navigate to claude_desktop_config.json file:
   • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
   • Windows: %APPDATA%\Claude\claude_desktop_config.json
4. Restart Claude Desktop to run the Gateway After restarting, go to Claude Desktop Settings -> Developer -> Enkrypt Secure MCP Gateway.
5. Example prompts
   • list all servers, get all tools available and echo test

✨ Features

The Enkrypt AI Secure MCP Gateway provides the following features:

1. Authentication: Use a Unique Key to authenticate with the Gateway. Optionally, use an Enkrypt API Key to protect MCPs with Enkrypt Guardrails.
2. Ease of use: Configure MCP servers locally in the config file or in Enkrypt (coming soon) and use them in the Gateway by name.
3. Dynamic Tool Discovery: The Gateway dynamically discovers tools from MCP servers and makes them available to the MCP client.
4. Restrict Tool Invocation: Restrict access to specific tools by specifying them in the Gateway config.
5. Caching: Cache user gateway config and discovered tools locally or in an external cache server like KeyDB to improve performance.
6. Guardrails: Configure guardrails for each MCP server on both the input and output sides.
7. Logging: Log all requests and responses locally in MCP logs and forward them to Enkrypt (coming soon) for monitoring.

Guardrails

Input Protection: Topic detection, NSFW filtering, toxicity detection, injection attack prevention, keyword detection, policy violation detection, bias detection, and PII redaction (more coming soon).

Output Protection: All input protections plus adherence checking and relevancy validation (more coming soon). Automatically unredact responses if redacted on input.

📦 Installation

Local Installation

The detailed steps for local installation are as described in the Quick Start section.

Remote Installation

(Coming soon)

💻 Usage Examples

Example prompts

• list all servers, get all tools available and echo test
• echo test and also echo best
• echo "hello; ls -la; whoami"

📚 Documentation

High level steps of how the MCP Gateway works

Gateway Config

You can edit the enkrypt_mcp_config.json file to add or modify MCP servers and configure guardrails.

{
    "common_mcp_gateway_config": {
        "enkrypt_log_level": "INFO",
        "enkrypt_guardrails_enabled": false,
        "enkrypt_base_url": "https://api.enkryptai.com",
        "enkrypt_api_key": "YOUR_ENKRYPT_API_KEY",
        "enkrypt_use_remote_mcp_config": false,
        "enkrypt_remote_mcp_gateway_name": "enkrypt-secure-mcp-gateway-1",
        "enkrypt_remote_mcp_gateway_version": "v1",
        "enkrypt_mcp_use_external_cache": false,
        "enkrypt_cache_host": "localhost",
        "enkrypt_cache_port": 6379,
        "enkrypt_cache_db": 0,
        "enkrypt_cache_password": null,
        "enkrypt_tool_cache_expiration": 4,
        "enkrypt_gateway_cache_expiration": 24,
        "enkrypt_async_input_guardrails_enabled": false,
        "enkrypt_async_output_guardrails_enabled": false
    },
    "gateways": {
        "tLIYf0YEFTIPLXDO337zPRQhmnoXnLqLUKB3XuDX1inent9vGRFvwLDJGoeaktWu": {
            "id": "2536722c-e5d7-4719-97ab-2cdd4ce942c0",
            "mcp_config": [
                {
                    "server_name": "echo_server",
                    "description": "Dummy Echo Server",
                    "config": {
                        "command": "python",
                        "args": [
                            "C:\\Users\\PC\\Documents\\GitHub\\enkryptai\\enkrypt-secure-mcp-gateway\\test_mcps\\echo_mcp.py"
                        ]
                    },
                    "tools": {},
                    "input_guardrails_policy": {
                        "enabled": false,
                        "policy_name": "Sample Airline Guardrail",
                        "additional_config": {
                            "pii_redaction": false
                        },
                        "block": [
                            "policy_violation"
                        ]
                    },
                    "output_guardrails_policy": {
                        "enabled": false,
                        "policy_name": "Sample Airline Guardrail",
                        "additional_config": {
                            "relevancy": false,
                            "hallucination": false,
                            "adherence": false
                        },
                        "block": [
                            "policy_violation"
                        ]
                    }
                }
            ]
        }
    }
}

(Optional) Add GitHub MCP Server to the Gateway

• Install and run docker on your machine.
• Create a personal access token from GitHub.
• Add the GitHub server block to enkrypt_mcp_config.json.
• Restart Claude Desktop and run prompts to discover tools.

(Optional) Protect GitHub MCP Server and Test Echo Server with Enkrypt Guardrails for FREE

• Create a guardrail in the Enkrypt App.
• Get an Enkrypt API Key.
• Add the API Key and guardrail to the config file.
• Test the guardrails.

Recommendations for using Guardrails

• Use a separate guardrail for each server for fine-tuning.
• Experiment with different combinations of detectors and blocks.
• Try the Policy Violation detector with a custom policy.

Setup Other MCP Clients

• For Cursor, copy the MCP config to the mcp.json file.
• Chat with the MCP server using example prompts.

Other Tools Available

• Get Cache Status: View the summary of the cache status.
• Clear Cache: Clear the local or external cache.

Deployment Patterns

1. Local Gateway, Local Guardrails and Local MCP Server
2. Local Gateway, Local MCP Server with Remote Guardrails
3. Local Gateway with Remote MCP Server and Remote Guardrails
4. Remote Gateway, Remote MCP Server and Remote Guardrails

🔧 Technical Details

The Gateway is built with authentication, automatic tool discovery, caching, and guardrail enforcement. It uses Python and interacts with MCP servers and clients through various scripts and configurations.

📄 License

Enkrypt AI MCP Gateway Core

This project's core functionality is licensed under the MIT License. See the LICENSE.txt file for the full license text.

Enkrypt AI Guardrails, Logo, and Branding

© 2025 Enkrypt AI. All rights reserved. Enkrypt AI software is provided under a proprietary license. Unauthorized use, reproduction, or distribution is strictly prohibited.

Terms of Use: https://www.enkryptai.com/terms-and-conditions Privacy Policy: https://app.enkryptai.com/privacy-policy