MCP gateway you deploy: a Tracekit signer decides and signs each call; agents send each run's token.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
MCP gateway you deploy: a Tracekit signer decides and signs each call; agents send each run's token.