asks for a tool
CirvixMCP control
One blocked call
at the MCP boundary.
The model can ask an MCP server for anything that server exposes. Cirvix evaluates the JSON-RPC tool call before the upstream server receives it.
→
production/users
→
normalizes + evaluates
→
platform-oncall
DENY upstream tool was not called
audit: decision=deny · transport=mcpThis page demonstrates the gateway path. It does not claim to protect an MCP deployment that connects directly to its upstream servers.