MCP security gateway — per-tool policies, Ed25519-signed receipts, human approval gates.
Shadow mode logs everything without blocking. Enforce mode applies policy. More
4 in the Claude listing