Show HN: SentinelMCP – Stateless policy firewall and token-cost proxy for MCP

Category: security

Tags: mcp, security, proxy, cost-management, jwt

Score: 7.0/10 (Innovation: 6, Technical: 7, Documentation: 8, Utility: 7)

SentinelMCP is a stateless reverse proxy that enforces identity, policy, and token-cost budgets on Model Context Protocol (MCP) tool calls. It adds Origin validation, JWT verification, sliding-window budget tracking, and human-in-the-loop approval via HMAC-signed resume tokens, filling a missing security and cost-control layer for production MCP deployments.

Target audience: devops, backend devs, platform engineers

Repository: https://github.com/asctttt/sentinelmcp · TypeScript · MIT · 1 stars

View on Hacker News