Cordon For MCP
Put a policy-enforcing MCP proxy with audit logging and human-in-the-loop approvals in front of risky agent tool calls.
Overview
Cordon for MCP is an MCP server for the Ship phase that proxies agent tool traffic with policy enforcement, audit logging, and human-in-the-loop approvals.
What is this MCP server?
- MCP security gateway with configurable policy enforcement
- Audit log of agent and tool activity through the proxy
- Human-in-the-loop (HITL) approvals for sensitive actions
- Start via npx @getcordon/cli with cordon.config.ts in cwd
- Server package version 0.3.0; website getcordon.com
- Cordon MCP server version 0.3.0
- npm package @getcordon/cli with positional start command
- Capabilities: policy enforcement, audit log, HITL approvals
What problem does it solve?
Unrestricted MCP tools let agents run dangerous commands with no policy, no audit trail, and no pause for human consent.
Who is it for?
Solo builders wiring powerful MCP tools who need guardrails before touching prod, secrets, or irreversible operations.
Skip if: Local-only experiments with no sensitive tools, or teams that already centralize MCP policy in a separate enterprise platform.
What do I get? / Deliverables
After Cordon starts from cordon.config.ts, tool calls pass through enforced rules, logged events, and optional HITL before they reach downstream MCP servers.
- Policy-gated MCP tool path with audit events
- HITL approval workflow for blocked or sensitive tool calls
Recommended MCP Servers
Journey fit
How it compares
MCP security proxy with HITL, not a catalog or codebase intelligence server.
Common Questions / FAQ
Who is Cordon For MCP for?
Indie and small-team builders who run MCP in Claude Code or similar clients and need policy, audits, and approvals before high-risk tools execute.
When should I use Cordon For MCP?
Use it in ship and security prep when connecting agents to production APIs, deploy tools, or broad MCP servers that warrant enforcement and HITL.
How do I add Cordon For MCP to my agent?
Install @getcordon/cli, add cordon.config.ts to your project, run npx @getcordon/cli start, and point your agent MCP client through the Cordon proxy per getcordon.com docs.