MCP Proxy and Multi-Server Management

Built-in MCP proxy aggregating external servers: server registry, DLP on tool calls, tool call logging, per-server ACLs, rate limiting (120/min default — overridable per server / per tool), connection testing, SSE/Streamable HTTP, authentication credential pass-through with central storage.

Independent observability for MCP: per-server uptime, request volume, latency, error rate, and detailed audit logs for every tool invocation are tracked independently of the downstream LLM execution — failures inside an MCP server can be debugged without disentangling them from model errors.

Tool discovery + authorization: the registry is the mandatory access path. Discovery (tools/list) is filtered by the requesting user’s ACL set before being returned, so users only see tools they’re allowed to invoke. Every tools/call is logged with caller identity, arguments (DLP-scanned), and response.

APIs: /mcp-proxy/servers, /mcp-proxy/:serverId/mcp, /mcp-proxy/:serverId/sse, /api/admin/mcp-proxy/settings, /api/admin/mcp-proxy/acls, /api/admin/mcp-proxy/test-connection, /api/admin/mcp-proxy/metrics (per-server health).

---