mcloh/Enterprise-MCP-Service-Bus
1
0
Fork 0
mirror of https://github.com/mcloh/Enterprise-MCP-Service-Bus.git synced 2026-11-06 06:24:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
73f0dd53e757315485d011634c2ff116e4c06ea5
Enterprise-MCP-Service-Bus/docs/adr/ADR-002-enforcement-at-the-gateway.en-us.md
Marcos Lohmann f8d9b6cdcd revisão e complementação da documentação do projeto
2026-09-14 14:54:28 -03:00

563 B
Raw Blame History

ADR-002: MCP Gateway as the sole PEP

Status: Accepted. Source: this ADR is the canonical record of this decision. For implementation and validation context, see RI/docs/AS-BUILT.md and, where applicable, the relevant contract in RI/docs/interfaces/.

Context

Where to apply enforcement.

Decision

MCP Gateway is the sole PEP; it never delegates the ALLOW/DENY decision to the LLM.

Alternatives Considered

Distributed enforcement in each MCP Server.

Consequences

Centralizes EP-05; domain servers (EP-06) do not reimplement authz.

Reference in New Issue View Git Blame Copy Permalink