MCP gateway: enforcement instead of recommendation
The MCP gateway sits between agent and tool and enforces the decision: a critical tool call runs only if the mandate covers it — otherwise it is blocked or put before a human. That is the difference between an agent that should ask and one that must ask.
Hard PEP
A policy enforcement point the agent cannot bypass: the call goes to the gateway, not directly to the tool. Every checked critical call counts as a verified action — allowed, denied or escalated.
Single-use execution capability
After an allow, Mandact issues a short-lived capability that can be consumed exactly once. An intercepted permission cannot be reused for a second execution.
Sandbox and production
On the Developer plan the gateway runs as a sandbox; from Team upwards in production, together with human approval and the kill switch.
Status
Part of the platform; production use from the Team plan.