Declarative Policy Definition And Composition

Core proxy engine for Cordon for MCP — the security gateway for MCP tool calls

Unique: Provides a declarative policy language tailored to MCP tool calls, allowing non-developers to define security rules without understanding the underlying proxy architecture

vs others: Offers MCP-specific policy syntax that understands tool call semantics (tool name, parameters, context), whereas generic API gateway policies require manual mapping of tool calls to API endpoints

via “declarative policy composition and inheritance”

Compile MCP tool manifests into sandbox policies (bwrap, egress rules, and more).

Unique: Provides declarative policy composition with inheritance semantics specifically for sandbox policies — enables policy reuse and consistency across tool fleets

vs others: Eliminates policy duplication by enabling template-based composition where manual policy authoring would require writing similar rules for each tool