AI agents have learned to use real tools. Through MCP, the same assistant that drafts your emails can now read your CRM, update your records and move money. But look at how that usually works: the AI app holds the API keys for every tool it can reach. The only thing standing between a cleverly worded prompt and your payment system is the model's good behaviour.
We built MetaMynd MCP Gateway to change where the keys and the decisions live. The gateway sits between your AI app and the MCP servers it uses. To the app it looks like any other MCP server; to your tools it looks like any other client. But before a single tool runs, the call is checked against the agent's mandate. Allowed calls go through. Calls over a limit are refused. Calls that need a person are held until someone approves them. And because the tools' API keys live in the gateway, kept in your operating system's keychain and never written into a config file, the AI app has no way to go around it.
Nothing is left ungoverned by accident. Every tool passes through the gateway, reads included, and a tool that hasn't been mapped to a mandate simply isn't offered to the app. When you set the gateway up, it drafts a mapping for every tool on every server and marks each one for review. It won't start until a person has checked each tool against what the agent is actually allowed to do.
We wanted this to work for people who will never open a terminal, too. The gateway can build a one-click Claude Desktop extension for an agent with nothing secret inside it: Claude Desktop asks for each credential at install and stores it securely. For developers, it fits in front of Claude Code, Cursor, VS Code, LangChain and the OpenAI Agents SDK without changing a line of agent code. There's also a reviewed catalog of popular servers, Notion, HubSpot and Brave Search, each pinned to an exact version with its tools checked one by one.
It runs on your own machine, or on your own server for hosted chat products. MetaMynd never holds your tools' keys; the decision itself comes from the MetaMynd gate. It's a developer preview today, built on the open-source MetaMynd SDKs and the published MetaMynd Agent Governance Protocol, and we'd love to hear which servers you want reviewed next.