The safeguards map / 3.3 Gateways
TrueFoundry AI Gateway
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A commercial gateway for model calls and Model Context Protocol (MCP) tool calls that runs guardrails at four hooks, including Cedar and OPA policy checks before a tool executes.
Where it sits
3.3 Gateways (primary): Sits on the request path for model calls and MCP tool calls, and denies a call when a guardrail fails, including Cedar policies it evaluates and Rego decisions it fetches from an operator-run OPA server.
OPA Guardrails enable you to implement flexible, policy-driven access control for LLM requests, responses, and MCP (Model Context Protocol) tool invocations
captured
Cedar Guardrails use the Cedar policy language to evaluate authorization decisions for MCP tool executions.
captured
the OPA guardrail sends the request context to your OPA server and enforces the policy decision in real time.
captured
An LLM input-validation failure cancels the in-flight model request.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- agentAI system
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settingsan external decision point
- Traffic it sees
- model callstool calls (MCP)
- Can the agent bypass it
- depends
Handoffs
consumes Policy: Cedar policies and Rego policies (OPA)
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.