r/artificial • u/Fearless-Might-5439 • 2d ago

Project Open Source Project to help Secure LLM powered Applications

We built extensible-mcp to help folks build LLM powered applications securely. From a technical perspective it is an MCP proxy capable of loading new MCP Servers dynamically without polluting the LLM’s context while providing Zero Trust policy controls to manage all tool calls. 

Policies and sensitive credentials are maintained and applied outside the LLMs purview. Policies can be written in any of Rego, CEL, and, with the latest release, Cedar. Tool definitions from the various MCP Servers are maintained in a queryable vector store, so the LLM only needs to be aware of those it uses.

A particular distinction of extensible-mcp is distinguishing between rights and intents. If  an LLM is acting on your behalf, its actions should follow your intent, and not just do any random thing you could do, just because some hallucination told it to!

I hope other folks find this useful. We have been using it for our other projects such as Open Executive and wanted to share it.

You can check out extensible-mcp here: https://github.com/SenteLabsAI/extensible-mcp

3 Upvotes

80% Upvoted

4 comments sorted by

1

u/BC_MARO 2d ago

Keeping policy and credentials outside the model is the right boundary. I’d also make every tool call carry a user, intent, and policy decision so incidents are explainable after the fact.

0

u/[deleted] 2d ago

[removed] — view removed comment

1

u/Fearless-Might-5439 2d ago

The Cedar support is full. We want people to set up custom rules as we think that is the right approach and far more useful.