babas03
- Karma
- 0
- Created
- ()
- Submissions
- 0
-
MCP lets LLMs call real tools, databases, file systems, APIs. The spec has no security model. An agent is either off or full admin, and "trust the model" is the current answer. Cordon is an open source MCP gateway. It's…
- Show HN: Cordon – open-source security gateway for MCP tool calls (cordon-server-production.up.railway.app)
MCP gives AI agents access to real tools — databases, filesystems, APIs. There's no built-in way to say "require human approval before any write" or "this tool is never allowed, ever." Cordon is a stdio proxy that sits…