Install

Put the boundary between your agent and your infrastructure.

Self-hosted, open source, deterministic. No model in the decision path, no telemetry leaving your network. Go 1.26+.

$ go install github.com/themayursinha/mcp-visor/cmd/mcp-visor@latest

or take a pre-built binary and checksum from Releases

$ mcp-visor serve --demo
$ mcp-visor serve -server <your-mcp-server> -policy policy.yaml -audit-log ./audit.jsonl

Allows fail closed unless -audit-log points at a writable JSONL file.

Policy, threat model, and the missing layer.

Threat model

Policy model

Spec engineering