#zero-trust

Zero trust gateway for MCP servers. Aggregate, filter, and securely access MCP tools from anywhere without VPNs, open ports, or exposed endpoints. Built on OpenZiti, zrok, and Agora with cryptographic identity, mTLS, per-client isolation, and tool-level permission control.

JavaScript and TypeScript SDK for secure outbound-only rstream tunnels.

Zero-trust governance layer for Claude Code. Policy-enforced MCP gateway with autonomy controls, middleware chain, audit log, HALT kill-switch, and prompt-injection defense.

Self-hosted SSH/RDP access gateway with PAM workflows — reverse-tunnel agents, session recording, JIT approvals, and ReBAC. A lighter self-hosted alternative to the big zero-trust access platforms.

Rust CLI for reversible file operations. Every delete, modify, and move carries inversion metadata, enabling instant rollback without external backups. Uses content-addressed storage (SHA-256) and an append-only operation log. Formal proofs of the complete reversibility guarantee are pending.

rstream CLI, local MCP server, and Go SDK for secure outbound-only tunnels.

One-command Cloudflare Tunnel Zero Trust CLI

Octelium enterprise

Runtime control, security, and governance for AI agents — decide what an agent may do at the moment it acts, revoke that authority instantly, and keep tamper-evident evidence of every decision.