Browse
→ Infrastructure
→ portcullis
portcullis
Rust policy-enforcing gateway for the Model Context Protocol that aggregates upstream MCP servers, applies tool-call policies, scans results for prompt injection or leaked credentials and writes JSONL audit records. Clients point at portcullis instead of raw servers, enabling default-deny authorization, output sanitization and explainable policy checks before calls reach upstream tools. Public GitHub repository created August 19, 2026.
MCP unverified
Integration
| Transport | stdio |
| Auth | none |
| Endpoint | https://github.com/sushantlokhande14/portcullis |
| Install | git clone https://github.com/sushantlokhande14/portcullis && cd portcullis && cargo build --release |
Use Cases
| 01 | Put a default-deny policy layer in front of one or more MCP servers before exposing tools to an agent |
| 02 | Scan MCP tool output for leaked credentials and instruction-shaped prompt-injection content before it reaches the model |
| 03 | Audit every allowed or denied tool call with rule matches, argument digests and scanner findings |
Tags
mcp-gateway policy-engine prompt-injection credential-scanning audit-log security rust proxy
Machine-readable: /api/servers.json
· JSON-LD schema embedded in <head>