1 · Linked library
SecureMCP
For MCP servers you build. Change one import and the security ships inside the server, so it holds wherever the server is deployed.
Example: MySQL
SecureMCP · MACAW’s MCP adapters
MCP leaves identity, policy and audit to each server. SecureMCP is a thin wrapper that adds them in one line of code, for MCP 1.x and 2.0. 51 popular servers, ready to deploy.
MCP standardizes how agents call tools. It leaves who may call them, and the proof, to you.
Seamless support for MCP 1.x and 2.0, out of the box. As the standard changes, we keep it backward compatible.
Every server gets a tamper-evident, authenticated context out of the box. Who is asking, and on whose behalf, can’t be forged or swapped between users.
Change one import, or put a proxy in front. Your tools stay as they are. Identity, policy and a signed record come with it.
Policy lives in MACAW, not in each server. Every MCP server sits under one policy and one record, and switching identity providers touches no code.
Every mode checks a call where it’s made, not at a central gateway. So each decision sees the real user, adds no extra network hop, and a compromised server can’t reach the others.
1 · Linked library
For MCP servers you build. Change one import and the security ships inside the server, so it holds wherever the server is deployed.
Example: MySQL
2 · Inline proxy
For MCP servers you call but don’t own. The check runs inside your app, so it adds no network hop and their code stays untouched.
Example: Databricks
3 · Sidecar
For agents you can’t change. The proxy runs as its own process next to the agent, so neither the agent nor the server changes.
Example: Claude Code and other coding agents
Fully open source, MAPL policies ready to install.
Your Databricks managed MCP endpoint, behind SecureMCPProxy.
Cloudflare’s MCP servers, behind SecureMCPProxy.
Stripe’s MCP server, behind SecureMCPProxy.
Supabase’s MCP server, behind SecureMCPProxy.
Notion’s MCP server, behind SecureMCPProxy.
GitHub’s MCP server, behind SecureMCPProxy.
Grafana’s MCP server, behind SecureMCPProxy.
The dbt MCP server, behind SecureMCPProxy.
Jupyter’s MCP server, behind SecureMCPProxy.
Tell us which MCP server your agents need, and we’ll secure it.
One control plane decides for all of them.