scoped-mcp

Per-agent scoped MCP tool proxy. One process per agent — loads only the tools that agent’s manifest allows, scopes backend resources to that agent’s namespace, injects credentials so the agent never sees them, and writes every tool call to a structured audit trail.

pip install scoped-mcp

GitHub · PyPI

---

Documentation

• Manifest Schema Reference — all manifest fields and options
• Scoping Strategies — PrefixScope, NamespaceScope, and custom strategies
• Module Authoring Guide — write a custom tool module
• Threat Model — security boundaries and assumptions