Egress allowlist

Preview — part of the MCP Gateway private beta. Join the waitlist →

A server that can phone home is a server that can exfiltrate. The Gateway gives each server a network allowlist: it can only reach the hosts you permit.

How it works

  • Each server's capability manifest lists the hosts it's allowed to reach.
  • Outbound connections route through an egress proxy that checks every request against that allowlist.
  • Allowed connections pass through; everything else is blocked and recorded in the audit trail.

Example manifest

{
  "network": { "allow": ["api.github.com", "github.com"] }
}

A GitHub server can reach GitHub — and nothing else. An attempt to reach evil.example.com is refused and logged as an egress_blocked event.

See also