Deployment fit

Map agent risk to the right control layer

Use McpVanguard when MCP tool calls need runtime enforcement. Use VEX when consequential actions need explicit authorization, review, and evidence.

Layer selector
MCP tool callRuntime enforcement
High-risk actionAuthorization evidence
Mixed workflowBoundary + review trail
MCP tool risk
Use McpVanguard

Block unsafe tool calls before execution.

Approval risk
Use VEX Protocol

Authorize consequential actions and preserve evidence.

Mixed deployment
Use both layers

Enforce live policy and preserve high-risk decision records.

Boundary map

A risk becomes manageable when its control point is explicit.

Start with the action that could cause harm, then place the enforcement or authorization boundary before that action reaches the system it can affect.

Routed actions only
01

Agent proposes

Tool, target, arguments, and requested scope enter the workflow.

02

Boundary evaluates

McpVanguard or VEX applies the relevant control path.

03

Decision returns

The flow produces an explicit allow, warn, review, or block outcome where supported.

04

Team reviews

The routed action leaves a scoped record for operations or governance.

Internal copilots and knowledge agents

Security and platform teams

Metadata poisoning and unsafe retrieval can turn a helpful internal assistant into a data-leak or policy-bypass vector.

McpVanguard inspects inbound MCP requests and selected server metadata before execution, with deterministic enforcement at the tool-call boundary.

Input inspectionContext sanitizationCredential protection

Control tool use and reduce context-driven hijacking risk before execution.

Inspect MCP traffic
Constrain retrieval tools
Record blocked actions
Example control surface

Block untrusted tool metadata before model exposure; restrict retrieval tools to approved knowledge sources; alert on sensitive data in outbound parameters.

Targeted deployments
02 · Scope

Cloud and platform agents

Audience: Infrastructure and DevOps teams
Hazard: Agents with network or shell access can be redirected toward internal systems, metadata endpoints, or unsafe file paths.
Enforced resolution

Policy controls enforce network egress controls, filesystem path boundaries, and execution constraints before requests reach sensitive surfaces.

Constrain routed agent access to internal systems, metadata endpoints, or unsafe paths when the configured policy and deployment boundary support it.

CONTROL_SURFACE: Deny requests to localhost, RFC1918 ranges, and cloud metadata endpoints; normalize paths before filesystem access; require allowlisted tools per session.
Deny private ranges
Normalize filesystem paths
Require scoped tools
Egress controlsPath normalizationExecution boundaries
03 · Scope

Regulated workflows and approvals

Audience: Governance and compliance teams
Hazard: Teams need more than model logs when decisions affect transactions, records, or regulated operations.
Enforced resolution

VEX Protocol wraps governed actions in reviewable evidence that can support governance, audit, and post-incident review.

Clear documentation, independent reviewability, and accountable records for governed actions that matter.

CONTROL_SURFACE: Capture proposed action, authorization basis, identity context, execution outcome, and witness evidence for regulated approvals.
Capture proposed action
Bind authorization basis
Preserve witness evidence
Evidence recordsAction provenanceReview workflows
04 · Scope

Multi-agent orchestration

Audience: Agent platform builders
Hazard: As tasks move between agents, authority can drift and tool access can expand in ways teams did not intend.
Enforced resolution

Governed execution makes permission boundaries explicit and keeps enforcement outside the model's own reasoning path.

Maintain clear separation of responsibility as agent systems grow more complex.

CONTROL_SURFACE: Bind each agent handoff to scoped authority, reject out-of-scope delegation, and preserve the decision chain across the workflow.
Bind scoped handoffs
Reject authority drift
Preserve decision chain
Scoped authorityDelegation controlsSession boundaries

Ready to secure your AI infrastructure?

We work with teams that need a cleaner control model for agent systems before their agents act on real systems.