{"repo":"abluva/mcp-trust-plane","free":true,"listed":false,"github":"https://github.com/abluva/mcp-trust-plane","clone":"git clone https://github.com/abluva/mcp-trust-plane.git","description":"Composable data security plane for Model Context Protocol. Pluggable layers — collect, analyze, guard — across 50+ enterprise providers. Open architecture.","language":"JavaScript","stars":100,"topics":["access-control","agentic-ai","ai-agents","data-governance-and-ai","data-security","enterprise-security","guardrails","llm-security","mcp","model-context-protocol"],"license":"Apache-2.0","category":"mcp-servers","readme_excerpt":"MCP Trust Plane A pluggable, language-agnostic filter framework for Model Context Protocol (MCP) traffic. Each filter is a tiny HTTP service that decides whether a tool call should be allowed, blocked, modified, or truncated. Why MCP gives agents direct access to tools and data sources. That's powerful and dangerous in equal measure. Filters give you a place to enforce guardrails — block destructive SQL, redact PII before it reaches the model, throttle abusive agents, cap response sizes, redact columns — without modifying the upstream MCP server or the agent runtime. How it works - An MCP gateway sits in front of the upstream MCP server. - For every tools/call , the gateway asks an engine \"what should I do for target X at execution point Y?\". - The engine looks up the policies assigned to that target and, for each filter in those policies, calls POST {filter url}/filter . - Filters are completely independent processes. They can be written in any language. They share no state with the gateway or the engine. A reference engine and gateway live in the parent repo ( secure-ai-plane-x/mcp-filter-gateway ). This sub-project ships only the filter implementations and the contract. The Filter Contract Every filter MUST expose two HTTP endpoints: POST /filter Request body: Response body: - allow — let the request through unchanged. - block — reject. The gateway returns an MCP error using reason . - truncate — return a smaller payload ( modified response ) and an audit notice. Used by p","default_branch":null,"files":null,"tree":[],"storefront":"/r/abluva","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/abluva/mcp-trust-plane/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}