mcpgawk

mcpgawk Platform · one subscription

The gateway seat. Built on proof.

enforce puts one gateway in front of your fleet and decides every call before the server sees it. verify and monitor are how it knows — what each server does, and when one changes after you approved it. One subscription; build is included when it ships.

mcpgawk Platform

One subscription per person · 7-day trial · up to 3 machines

Includes enforce and monitor — one subscription, not separate purchases; verify stays free. build is still in development; when it ships it is included at no extra cost.

Start the 7-day trial →

Start the free 7-day trial with no card, or subscribe; the price is shown at checkout. Either way we email you a key and one install command — running the same day, no GitHub account needed. See refunds and terms.

Already purchased? Activate your license →

Enforce — the gateway

One endpoint in front of every server. Your agents point at it, and it decides each call before the server ever sees it.

  • A key per agent, so a refused call has a name against it.
  • Every call checked against the baseline you approved.
  • Arguments and responses inspected — secrets, PII, injection, links that should not be there. Refuse, redact or allow.
  • A hash-chained audit log you can hand to a security review — ship an off-box anchor and truncation is detectable too.
  • Fail open or fail closed when an evaluator errors. You set which, in your config.
  • One YAML for the fleet, or mcpgawk enforce install for a single agent.

It pays for itself the first time it refuses something real, which may not be in your first five minutes.

Monitor — after you approve

Servers you approved can change later. Monitor re-checks them on a schedule and tells you when one does.

  • Takes a baseline the first time it runs.
  • Alerts to a webhook, or the console.
  • History and open alerts are kept locally, so a restart does not lose them.

Verify — run it, do not read it

A scan reads what a tool says about itself. mcpgawk verify runs the server in a sandbox and reports what it actually did.

  • Finds data exfiltration, SSRF, tool poisoning and secret leaks.
  • Reproduces a finding in a fresh sandbox before reporting it.
  • Drives only tools that are provably read-only. Every tool it skips is named as skipped, never counted as clean.
  • Watches HTTP(S) egress through a proxy. --isolate adds a stricter pass.

Build — the generator

In development Not finished, and not what you are paying for today. It reads JSON OpenAPI specs only, not YAML, and its end-to-end proof runs in our CI rather than on your machine. Included in the same subscription when it ships.

Turn an OpenAPI spec into an MCP server that already passes the checks scan grades servers on.

  • Ranks endpoints and leaves out the internal and noisy ones.
  • Strips injection and hidden markup out of descriptions.
  • Infers read-only, destructive and idempotent from the HTTP method.
  • Scopes each tool to least privilege instead of a wildcard.