dome-gate 0.1.0

Interceptor chain orchestration for MCPDome
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

# dome-gate

Interceptor chain orchestration for MCPDome -- the core proxy that wires all security layers together.

## What it does

- Runs the MCPDome proxy loop, sitting between the MCP client and server on stdio.
- Orchestrates the full inbound interceptor chain in order: authentication (Sentinel), rate limiting and budgets (Throttle), authorization (Policy), and injection scanning (Ward).
- Handles outbound interception for schema pinning, detecting tool definition drift between the first and subsequent `tools/list` responses.
- Records every decision (allow, deny, rate-limit, injection) to the hash-chained audit ledger.
- Supports transparent pass-through mode for zero-enforcement deployments.

## Usage

```toml
[dependencies]
dome-gate = "0.1"
```

```rust
use dome_gate::{Gate, GateConfig};

let gate = Gate::new(config, authenticators, policy_engine, rate_config, budget_config, ledger);
gate.run_stdio("mcp-server", &["--stdio"]).await?;
```

## Part of MCPDome

This crate is part of [MCPDome](https://github.com/orellius/mcpdome), a security gateway for the Model Context Protocol. See the main repository for full documentation.

## License

Apache-2.0