mcpgawk Platform · one subscription
The gateway seat. Built on proof.
The gateway (enforce) takes the seat in front of your MCP fleet; verify and monitor are how it knows what it fronts and that it stays trustworthy — and build generates new servers that pass the audit by design. One subscription.
mcpgawk Platform
£29/month per person · 7-day trial · all their machines
Includes verify, enforce and monitor — one subscription, not separate purchases. build is still in development; when it ships it is included at no extra cost.
Start the 7-day trial →
Free while the gateway is in beta: ask for a seat, accept the GitHub invite we send, and you are running the same day. See refunds and terms.
Already purchased? Activate your license →
Enforce — the gateway
One endpoint in front of every server. Your
agents point at it, and it decides each call before the server ever sees it.
- A key per agent, so a blocked call has a name against it.
- Every call checked against the baseline you approved.
- Arguments and responses inspected — secrets, PII, injection, links that should not
be there. Block, redact or allow.
- A hash-chained audit log you can hand to a security review — ship an off-box anchor and truncation is detectable too.
- Fail open or fail closed when an evaluator errors. You set which, in your config.
- One YAML for the fleet, or
mcpgawk enforce install for a single agent.
It pays for itself the first time it blocks something real, which may not be
in your first five minutes.
Monitor — after you approve
Servers you approved can change later.
Monitor re-checks them on a schedule and tells you when one does.
- Takes a baseline the first time it runs.
- Alerts to a webhook, or the console.
- History and open alerts are kept locally, so a restart does not lose them.
Verify — run it, do not read it
A scan reads what a tool says about itself.
mcpgawk verify runs the server in a sandbox and reports what it actually did.
- Finds data exfiltration, SSRF, tool poisoning and secret leaks.
- Reproduces a finding in a fresh sandbox before reporting it.
- Drives only tools that are provably read-only. Every tool it skips is named as skipped,
never counted as clean.
- Watches HTTP(S) egress through a proxy.
--isolate adds a stricter pass.
Build — the generator
In development
Not finished, and not what you are paying for today. It reads JSON OpenAPI specs only, not
YAML, and its end-to-end proof runs in our CI rather than on your machine. Included in the
same subscription when it ships.
Turn an OpenAPI spec into an MCP server that
already passes the checks scan grades servers on.
- Ranks endpoints and leaves out the internal and noisy ones.
- Strips injection and hidden markup out of descriptions.
- Infers read-only, destructive and idempotent from the HTTP method.
- Scopes each tool to least privilege instead of a wildcard.
