Arc Gate

Runtime governance proxy that blocks prompt injection and capability abuse before MCP tool results reach an agent.

Sits between MCP clients and upstream MCP servers as a security layer, intercepting tool calls to block prompt injection attacks and capability abuse at the trust boundary. Supports multiple policy modes — balanced, browser agent, finance agent, RAG assistant, and strict — tailored to different agent use cases. Runs as a wrapper around an upstream MCP server, forwarding sanitized results back to the client.