Tamper-evident audit trail for MCP and HTTP(S) APIs, gateways and LLMs.
About
GxP Gateway Audit (mcp-glp-audit-proxy) is a local proxy that audits MCP tool calls and HTTP(S) API, gateway and LLM traffic. It supports six flows: mcp2mcp, mcp2api, api2mcp, api2api, mcp2llm and api2llm. Every call, including denials and failures, is written to an append-only, RFC 8785 canonical, SHA-256 hash-chained JSONL log on your own infrastructure.
What is new in 0.4.0: - HTTPS channel in and out, TLS 1.3 only, plain HTTP refused - Client identity: mTLS, bearer, or mTLS plus bearer - body_mode chosen by the customer: hash_only (default), redacted or full - Fail-closed hash chain: a broken chain stops the proxy and writes a critical alert - regulatory-report: reads the config offline and shows per regulation which settings are supported and what to change - archive-manifest, verify --manifest, controlled segment close, review command with CSV export
Designed to support GLP / 21 CFR Part 11 / EU Annex 11 workflows. It complements the audit trail of the target system and does not replace it.
Install: pip install mcp-glp-audit-proxy (Python 3.11+) License: MIT (Community). A paid Pro edition adds signed checkpoints, WORM storage, PDF/CSV reports, an IQ/OQ pack and SSO/OAuth.
Security Report
Valid MCP server (2 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.
7 files analyzed · 1 issue found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: GLP_CONFIG
Environment variable: GLP_PRINCIPAL_ID
Environment variable: GLP_PRINCIPAL_NAME
Environment variable: GLP_PRINCIPAL_ROLE
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-antonio-castellon-mcp-glp-audit-proxy": {
"env": {
"GLP_CONFIG": "your-glp-config-here",
"GLP_PRINCIPAL_ID": "your-glp-principal-id-here",
"GLP_PRINCIPAL_NAME": "your-glp-principal-name-here",
"GLP_PRINCIPAL_ROLE": "your-glp-principal-role-here"
},
"args": [
"mcp-glp-audit-proxy"
],
"command": "uvx"
}
}
}Reviews
No reviews yet
Be the first to review this server!
Version History
Community 0.3.2. Changes since 0.2.0 are in CHANGELOG.md in the repository.
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.