Lasso's MCP Gateway is a Python proxy that reads your MCP client config, manages the lifecycle of the servers in it, and intercepts requests and responses to sanitise sensitive information. Plugins add guardrails such as token masking and tracing, and a security scanner checks a server's reputation before it loads.
Who it suits
Developers who want a plugin-based proxy that masks secrets and scans MCP servers before loading them.
Strengths
- Masks tokens and other sensitive data in requests and responses.
- Scans MCP server reputation before loading.
- Installs with pip or runs in Docker; works with Cursor and Claude Desktop configs.
Limits
- Runs beside one client on one machine; no identity, central policy or team audit.
- Check the repository's recent activity before relying on it.
Scores on each criterion
| Criterion | Score | What we found |
|---|---|---|
| Authentication | Not documented | Local stdio proxy; no user identity. |
| Credential handling | Partial | Masks tokens in traffic; secrets stay in client config. |
| Policy depth | Partial | Guardrail plugins and a pre-load security scanner. |
| Audit | Partial | Tracing plugin records calls locally. |
| Observability | Partial | Tracing plugin; no OpenTelemetry documented. |
| Deployment model | Strong | pip or Docker, beside your client. |
| Shadow usage discovery | Not documented | Not documented. |
| Total | 6/14 | Ranked #7 of 8 |
Strong Built in and documented (2 points)Partial Present with gaps, or limited scope (1 point)Not documented Not found in the public docs we reviewed (0 points)
What it costs
Free (MIT). Install from PyPI as mcp-gateway.
Sources
Every score above comes from these public pages. Check them for changes since 11 November 2026.