Sevlex
Console
Get StartedIntroduction
v1.0.5 Engine·Layer 7 Zero-Trust MCP Gateway

Introduction

Sevlex is an enterprise-grade Layer 7 zero-trust security gateway and reverse proxy for autonomous AI coding agents. Run it locally or across your fleet to intercept, sanitize, and cryptographically audit every Model Context Protocol (MCP) tool call in flight.

Why Agent Security Matters

Autonomous agents like Cursor Composer, Claude Desktop, and Windsurf are granted direct access to filesystems, bash terminals, and internal APIs. Without runtime governance, an agent compromised by an indirect prompt injection can execute destructive SQL queries, wipe source trees, or leak AWS and database credentials via outbound webhooks.

Declarative Gateway Configuration (`sevlex.config.ts`)

sevlex.config.ts
import { createGateway, ToolGuard, AgentGuard } from '@sevlex/gateway';

export const gateway = createGateway({
  listen: { port: 8080, transport: 'sse' },
  engines: [
    ToolGuard({
      blockUnsafeBash: true,
      allowedSqlDialects: ['postgres'],
      preventFileTraversal: true,
    }),
    AgentGuard({
      maxToolCallsPerMinute: 60,
      circuitBreakerBudgetUsd: 10.0,
      dlpRedactTokens: ['OPENAI_API_KEY', 'DATABASE_URL', 'AWS_SECRET'],
    }),
  ],
  audit: {
    storage: 'neon-postgres',
    merkleLedger: true,
  },
});

Next Steps