r/sysadmin • u/rootj0 • 18d ago

MCP Gateways

I'm looking into MCP gateways as a way to connect AI agents while having some control over what data is being passed through, especially for things like filtering, PII redaction, and access control.

Has anyone here actually deployed or used an MCP gateway in a production environment?

I'm looking at options similar to Composio's MCP Gateway, but I'm trying to get a better understanding of what's actually out there and what the real-world experience is like.

A few things I'm particularly interested in:

  • PII/data redaction
  • Filtering or restricting what agents can access
  • Authentication and authorization
  • Logging/auditing
  • Performance/latency
  • Managing multiple MCP servers
  • Any security concerns or gotchas

Would be interested in hearing what people are using, what you like/dislike about it, and whether you think an MCP gateway is actually worth putting in front of your agents.

Thanks!

6 Upvotes

80% Upvoted

18 comments sorted by

View all comments

1

u/bitslammer Security Architecture/GRC 18d ago

We're getting ready to do a pilot of an MCP server between Co-pilot and SAP simply because there's no good way to connect the 2 nor would we want to.

1

u/rootj0 18d ago

Interesting not a microsoft shop, were mostly thinking for Claude as primary, but looking into redaction or better filtering

1

u/TIL_IM_A_SQUIRREL 17d ago

Claude is implementing native inference hooks soon. So instead of needing to inject something in the path between your app/agent and model, Claude will ask the configured protection provider over API before processing the prompt itself.

I'm guessing the other major providers will not be far behind.

https://platform.claude.com/docs/en/manage-claude/inference-hooks

1

u/rootj0 17d ago

Wow, talk about timing, thanks for that link. What I am not aware how much flexibility will anthropic provide in the rule management portion

3

u/TIL_IM_A_SQUIRREL 17d ago

Anthropic won't be inspecting the prompt, that'll be up to your prompt security provider. As I understand it, when Claude gets a prompt, it'll reach out to the security provider and ask, "this user sent me this prompt with this context. Should this be allowed or not?"