Multi-tenant MCP gateway
Portcullis
Secure, observable MCP gateway — auth, per-tool RBAC, rate limiting, audit logs, multi-tenant control plane.
FastAPIPostgreSQLRedis
Problem
Teams running more than one MCP server have no central auth, no unified authorization, no audit trail and no shared rate limiting.
Architecture
Clients → Portcullis (auth → RBAC → rate limit) → upstream MCP servers · Postgres control plane + Redis state
Key decisions
- Default-deny per-tool RBAC — nothing reachable unless allowed
- Atomic Redis Lua rate limiting per subject and tool
- Every decision audit-logged, allowed or denied
Want something like this built?
Send a 2-line brief — I reply with architecture thoughts, not fluff.
Hire me