The Problem

The MCP ecosystem is growing fast. Anthropic, Microsoft, Google, AWS, and Cloudflare are all publishing official MCP servers. Developers are connecting AI tools — Claude, Cursor, Windsurf — to databases, internal APIs, GitHub, and business systems.

The infrastructure for doing this at an individual level is mature. The infrastructure for doing this at an enterprise level does not exist.

Today, at most engineering teams, MCP servers run on developer laptops via npx. This means:

Credentials stored in JSON files on individual machines

No isolation between the MCP server and the host system

No central visibility into what is running

No clean offboarding when a developer leaves

No audit trail of what tools were called or what data was accessed This is not a theoretical risk.…