AgentVault.
An MCP gateway and permission broker that controls which external tools an AI agent can access, with scoped permissions and an audit trail.
The idea
AgentVault explores a practical problem in AI agent tooling: connecting agents to external services while retaining control over what each agent is allowed to do. It brings provider connections, agent registration, permissions, and tool activity into one interface.
Engineering the gateway
I built a Next.js dashboard and Fastify API around an MCP gateway. It authenticates MCP clients, discovers available upstream tools, and evaluates access before each invocation. Provider grants, agent capabilities, tool policies, and resource scopes are combined into an effective permission decision, with execution and denial events recorded for review.
Demo scope
The hosted prototype uses a provisioned demo account and a demonstration MCP provider. GitHub and Supabase connector adapters are present in the codebase but are not enabled in the public demo. The repository documents the architecture and setup.