[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_105":106},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":-5,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_56":48,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_75":-5,"_76":-5,"_77":-5,"_78":48,"_79":-5,"_80":81,"_82":83,"_84":85,"_86":87,"_88":89,"_90":91},"apiUrl","https://odel.app/api","creator","benjaminj","moduleId","enterprise-mcp-gateway","@benjaminj/enterprise-mcp-gateway","displayName","enterprise mcp gateway","tagline","Production-grade MCP Gateway in Go with RBAC, in-flight PII redaction, and audit logging.","iconKey","https://avatars.githubusercontent.com/u/1394033?v=4","category","local","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","pricingModel","free","creatorUserId","system:external-import","createdAt",1788152093000,"updatedAt",1788773021000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.BenjaminJ%2Fenterprise-mcp-gateway","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",1,"upstreamUpdatedAt",1788533450000,"detectedTransport","detectedAuthType","probeStatus","lastProbedAt","githubRepoUrl","https://github.com/BenjaminJ/enterprise-mcp-gateway","githubRepoFullName","BenjaminJ/enterprise-mcp-gateway","releaseId","ext-benjaminj-enterprise-mcp-gateway","version","1.0.0","descriptionMarkdown","# Enterprise MCP Gateway\n\n

\n $\"CI$ \n $\"Last$ \n $\"Go$ \n $\"MCP$ \n $\"Glama$ \n $\"Security\"$ \n $\"License\"$ \n

\n\n

\n Production-grade, high-performance Model Context Protocol (MCP) Gateway in Go.
\n A secure, audited, and PII-sanitized bridge connecting AI agents (Claude Desktop, Cursor, Antigravity, LangGraph) to enterprise backends (OpenAPI, Java/Spring Boot, Go microservices, relational databases).\n

\n\n

\n \n $\"enterprise-mcp-gateway$ \n \n

\n\n

\n $\"Enterprise$ \n
\n Live Demo: AI Agent querying CRM with in-flight PII & card redaction (left) while the Gateway streams structured JSON audit logs in real-time (right).\n

\n\n---\n\n## 🚀 Key Features\n\n- **⚡ Blazing Fast & Lightweight:** Single static Go binary (<25MB resident memory footprint, sub-millisecond routing overhead, zero external runtime dependencies).\n- **🛡️ High-Performance PII & Secret Redaction:** Real-time stream and JSON-key masking (Credit Cards with Luhn checksum validation, SSNs, emails, phone numbers, AWS keys, JWTs, GitHub PATs, and custom regex rules) before tool responses reach LLMs.\n- **🔐 Role-Based Tool Governance (RBAC):** Token-to-role resolution that limits tool visibility in `tools/list` and enforces execution permissions during `tools/call`.\n- **🔌 Dynamic OpenAPI / Swagger Connector:** Instantly registers validated MCP tools directly from OpenAPI 3.0/Swagger YAML or JSON specs without writing backend glue code.\n- **📜 Structured JSON Audit Logging:** Emits tamper-resistant, structured JSON logs containing caller identity, tool invoked, SHA-256 hashed parameters, execution latency, and PII redaction metrics.\n- **🔄 Dual Transport Support:** Fully compliant JSON-RPC 2.0 engine supporting both standard `stdio` (for Claude Desktop / Cursor) and HTTP Server-Sent Events (`SSE`) for distributed microservices.\n\n---\n\n## 🏗️ Architecture\n\n```\n┌────────────────────────────────────────────────────────┐\n│ AI Client (Claude / Cursor / Agent) │\n└──────────────────────────┬─────────────────────────────┘\n │ JSON-RPC 2.0 (stdio or SSE)\n ▼\n┌────────────────────────────────────────────────────────┐\n│ Enterprise MCP Gateway (Single Go Binary) │\n│ │\n│ 1. Transport Layer (pkg/mcp/transport) │\n│ - Stdio & HTTP-SSE Transceivers │\n│ 2. Security & Auth Guard (pkg/governance/rbac) │\n│ - Token authentication & least-privilege filtering │\n│ 3. Router & Tool Registry (pkg/mcp/protocol) │\n│ - JSON-RPC 2.0 & MCP handshake engine │\n│ 4. Backend Dispatcher (pkg/connector/openapi) │\n│ - Dynamic OpenAPI 3.0 path/query/body mapper │\n│ 5. Sanitization Engine (pkg/sanitizer/pii) │\n│ - Zero-alloc PII, secret, & JSON key redactor │\n│ 6. Structured Audit Logger (pkg/audit) │\n│ - Cryptographic JSON event trail for SIEM │\n└──────────────────────────┬─────────────────────────────┘\n │ Authorized & Sanitized Calls\n ▼\n┌────────────────────────────────────────────────────────┐\n│ Internal Enterprise Services (Java / Go / DBs) │\n└────────────────────────────────────────────────────────┘\n```\n\n---\n\n## 📦 Quick Start\n\n### 1. Build from Source\n\nEnsure you have Go 1.24+ installed:\n\n```bash\n# Clone the repository\ngit clone https://github.com/BenjaminJ/enterprise-mcp-gateway.git\ncd enterprise-mcp-gateway\n\n# Build gateway and mock backend server\ngo build -o bin/mcp-gateway ./cmd/gateway\ngo build -o bin/mockserver ./cmd/mockserver\n```\n\n### 2. Run the Mock Enterprise Backend (Terminal 1)\n\n```bash\n./bin/mockserver --port 8081\n```\n\n### 3. Run the Gateway with Sample Config (Terminal 2)\n\n#### Option A: Stdio Mode (Default)\n```bash\n./bin/mcp-gateway --config ./examples/config.yaml --token \"agent-support-key\"\n```\n\n#### Option B: HTTP Server-Sent Events (SSE) Mode\n```bash\n./bin/mcp-gateway --config ./examples/config.yaml --transport sse --port 8080\n```\n\n### 4. Stream Live Audit Logs in Real-Time (Terminal 3)\n\nFollow and format structured audit records as tools execute:\n\n**PowerShell (Windows):**\n```powershell\nGet-Content -Path .\\audit.log -Wait -Tail 10 | ForEach-Object {\n if ($_ -match '^\\s*\\{') {\n $e = $_ | ConvertFrom-Json\n $time = ([DateTime]$e.timestamp).ToLocalTime().ToString(\"HH:mm:ss\")\n $statusColor = if ($e.status -eq \"SUCCESS\") { \"Green\" } else { \"Red\" }\n $redactColor = if ($e.pii_redacted_count -gt 0) { \"Yellow\" } else { \"DarkGray\" }\n Write-Host \"[$time] \" -NoNewline -ForegroundColor DarkGray\n Write-Host \"[$($e.status)] \" -NoNewline -ForegroundColor $statusColor\n Write-Host \"$($e.tool) \" -NoNewline -ForegroundColor Cyan\n Write-Host \"(Role: $($e.role), Latency: $($e.duration_ms)ms, Redacted: $($e.pii_redacted_count))\" -ForegroundColor $redactColor\n }\n}\n```\n\n**Bash / Linux / macOS (`jq`):**\n```bash\ntail -f audit.log | jq -c '{time: .timestamp, status: .status, tool: .tool, role: .role, latency_ms: .duration_ms, redacted: .pii_redacted_count}'\n```\n\n---\n\n## 🔍 Verification with Anthropic Official MCP Inspector\n\nYou can test and inspect the gateway using Anthropic's official `@modelcontextprotocol/inspector`:\n\n### Test via Stdio:\n```bash\nnpx @modelcontextprotocol/inspector ./bin/mcp-gateway --config ./examples/config.yaml --token agent-support-key\n```\n\n### Test via SSE:\n1. Start the gateway in SSE mode:\n ```bash\n ./bin/mcp-gateway --config ./examples/config.yaml --transport sse --port 8080\n ```\n2. Open the inspector pointing to the SSE endpoint:\n ```bash\n npx @modelcontextprotocol/inspector http://localhost:8080/sse\n ```\n\n---\n\n## 💻 Claude Desktop Integration\n\nTo connect Claude Desktop to your enterprise systems through `enterprise-mcp-gateway`:\n\n1. Open your Claude Desktop configuration file:\n - **macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`\n - **Linux:** `~/.config/Claude/claude_desktop_config.json`\n - **Windows:** `%APPDATA%\\Claude\\claude_desktop_config.json`\n\n2. Add `enterprise-mcp-gateway` to the `mcpServers` object:\n\n```json\n{\n \"mcpServers\": {\n \"enterprise-gateway\": {\n \"command\": \"/absolute/path/to/enterprise-mcp-gateway/bin/mcp-gateway\",\n \"args\": [\n \"--config\",\n \"/absolute/path/to/enterprise-mcp-gateway/examples/config.yaml\",\n \"--token\",\n \"agent-support-key\"\n ]\n }\n }\n}\n```\n\n3. Restart Claude Desktop. The enterprise tools (`listCustomers`, `getCustomerDetails`, `createSupportTicket`, etc.) will appear with a hammer icon in the prompt interface.\n\n---\n\n## ⚙️ Configuration Guide (`config.yaml`)\n\n```yaml\nserver:\n name: \"enterprise-mcp-gateway\"\n version: \"1.0.0\"\n transport: \"stdio\" # \"stdio\" or \"sse\"\n host: \"0.0.0.0\"\n port: 8080\n\ngovernance:\n enabled: true\n default_role: \"support_agent\"\n tokens:\n \"agent-ro-secret\": \"readonly_agent\"\n \"agent-support-secret\": \"support_agent\"\n \"admin-master-secret\": \"admin\"\n roles:\n readonly_agent:\n allowed_tools:\n - \"list*\"\n - \"get*\"\n support_agent:\n allowed_tools:\n - \"list*\"\n - \"get*\"\n - \"createSupportTicket\"\n admin:\n allowed_tools:\n - \"*\"\n\nsanitizer:\n enabled: true\n mask_card_numbers: true # Luhn-verified Credit Card masking\n mask_ssn: true # US SSN masking\n mask_secrets: true # Private keys, AWS keys, JWTs, PATs\n sensitive_keys:\n - \"password\"\n - \"secret\"\n - \"token\"\n - \"apiKey\"\n - \"ssn\"\n - \"creditCard\"\n custom_regex:\n - name: \"Internal Employee ID\"\n pattern: \"\\\\bEMP-[0-9]{6}\\\\b\"\n replacement: \"[REDACTED-EMP-ID]\"\n\naudit:\n enabled: true\n log_path: \"stdout\" # \"stdout\" or path to file e.g. \"/var/log/mcp-audit.log\"\n hash_inputs: true # SHA-256 hashes tool arguments for compliance\n\nconnectors:\n - name: \"enterprise-crm\"\n type: \"openapi\"\n spec_file: \"./examples/crm-openapi.yaml\"\n base_url: \"http://localhost:8081\"\n headers:\n Authorization: \"Bearer backend-secret-token\"\n X-Gateway-Source: \"enterprise-mcp-gateway\"\n timeout_seconds: 15\n```\n\n---\n\n## 🧪 Testing\n\nRun all unit and end-to-end integration tests:\n\n```bash\n# Run all unit and integration tests\ngo test -v ./...\n\n# Run tests with the Go race detector enabled\ngo test -race ./...\n```\n\n---\n\n## 🐳 Docker Deployment\n\n```bash\n# Build lightweight Docker image\ndocker build -t enterprise-mcp-gateway:latest .\n\n# Run container in SSE mode\ndocker run -d -p 8080:8080 -p 8081:8081 enterprise-mcp-gateway:latest --transport sse --port 8080\n```\n\n---\n\n## 📄 License\nMIT License.\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"upstream",{"_94":95,"_96":97,"_98":99,"_100":101,"_102":-5,"_103":104},"requiredSecrets",[],"tags",[],"assets",[],"stats",{"_92":81,"_93":81},"ratingAvg","reviewCount","topics",[],"license","MIT","language","Go","registryName","io.github.BenjaminJ/enterprise-mcp-gateway","homepage","packages",[],"ENV",{"_107":108,"_109":110,"_111":112},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]