MCP gateway
Developer notes for Oximy's MCP gateway package and related policy controls.
Package
The MCP gateway code lives in packages/mcp-gateway.
It includes egress handling, audit records, proxying, refresh providers, classification, secret scanning, token storage, tool policy, and tool pinning.
Validation
Use focused package checks when changing the gateway:
pnpm --filter @oximy/mcp-gateway typecheck
pnpm --filter @oximy/mcp-gateway testDocumentation goals
This section should eventually describe:
- Gateway architecture.
- Token and client registration.
- Secret scanning behavior.
- Tool approval and pinning semantics.
- Audit event shape and operational debugging.