Hey <!everyone> 👋
Big launch today. Permit MCP Gateway is live. Upvote us on Product Hunt 🎉
For those following the MCP security space, you know the gap: MCP handles basic authentication, but there’s no per-tool authorization, no human-to-agent delegation tracking, and no audit trail. Agents connect and get access to everything on the server. That’s fine for local dev. Not fine for production.
Permit MCP Gateway is a proxy that sits in front of any MCP server and adds what’s missing:
• Fine-grained authorization per tool, per user, per action
• Human-to-agent delegation chain with trust ceilings
• Consent flows for sensitive operations
• Full audit log of every allow/deny decision
• Auto-generated policies for every tool on the server
It runs on the same policy engine you already know from Permit. OPA, Zanzibar-style ReBAC. If you’re already using Permit for your app authorization, extending it to MCP is the same model.
Integration is one URL change per MCP server. No SDK. No code changes.
Links:
🔗 Product page: https://permit.io/mcp-gateway
📖 Docs: https://docs.permit.io/permit-mcp-gateway/overview
🚀 Try it: https://app.agent.security
🎬 Launch video: