I built a self-hosted MCP control layer for enterprise systems — permissions, audit, human-in-the-loop

说明与用途

为企业系统构建自托管 MCP 控制层，提供数据集级访问控制、审计跟踪和人工审核门控，使用 Docker Compose 在内网部署。

问题

Clients needed a consistent way to control what agents could see, how they accessed systems, and who approved actions, without hand‑rolled solutions per project.

结果

The solution provides a unified, self‑hosted control layer that standardizes permissions, audit, and approval across enterprise systems, eliminating custom hand‑rolled implementations.

工作流

• Deploy the Docker Compose stack on the intranet
• Configure per‑dataset access rules to define who sees what and mask sensitive fields
• Use the plugin engine to generate connectors from templates for target systems
• Enable audit logging to capture every call and trace actions
• Set up human‑in‑the‑loop gates for critical actions to require approval before execution

证据

a self-hosted MCP control layer. It exposes your enterprise systems as MCP tools and puts permissions, audit and approval gates on top of them.

来源

Per-dataset access control — configurable who-sees-what, sensitive fields auto-masked

来源

Full audit trail — every call logged and traceable

来源

Human-in-the-loop — critical actions are reviewed before they execute

来源

Docker Compose, runs fully on your intranet — data never leaves your network

来源