Every agent tool call, inspected and cleared.
Outpost sits between your AI agents and their MCP tools — self-hosted, inside your own network. It validates every call, pins tool definitions, and flags drift and anomalies before they reach your agent. Your payloads never leave your infrastructure.
One self-hosted checkpoint between agents and everything they touch
Run the Outpost binary inside your own network, in front of your MCP servers. Every call flows through five checkpoints before it reaches a server — payloads never leave your infrastructure.
Every tools/call is checked against its pinned schema synchronously, in under a millisecond — no LLM in the hot path.
The frontier is hostile
See every drift, anomaly, and verdict across your fleet
One dashboard for every Outpost instance you run — built entirely from the metadata your binary reports out, never from raw call payloads.
Where Korneza fits next to the category
Every MCP gateway ships some of this. As of mid-2026, no other public product combines a self-hosted proxy with a published, independently checkable accuracy rate.
Based on public product documentation, mid-2026. Categories evolve fast — tell us if something's out of date.
Free forever for individual use. Open for anyone to build on.
The Outpost proxy binary is free for individual use and open source from day one — read every checkpoint, audit the code that sits in front of your agents, and ship a PR. No seat limits, no trial clock.
| 41 | · | func validateCall(t *Tool) error { |
| 42 | · | if t == nil { |
| 43 | − | return errors.New("nil tool") |
| 43 | + | return fmt.Errorf("outpost: nil tool definition") |
| 44 | · | } |
| 45 | · | return t.Schema.Validate() |
| 46 | · | } |
Reviewed by the core team, not a bot — merged in days, not months.
Built for engineering and security
Built for engineering
Ship agents that hold up in production — running entirely inside your own network.
- Self-hosted proxy — one static Go binary, no dependencies
- Sub-millisecond structural validation on every tools/call
- Per-tool circuit breaking
- Continuous schema-drift detection & SHA-256 tool-def pinning
- Native OpenTelemetry export
Built for security
Give your security team a control outside the model — with an accuracy rate they can actually check.
- Tool-poisoning & prompt-injection scanning, on definition change
- Statistical anomaly detection per tool, per server
- Published false-positive / false-negative rate every release
- Payloads never leave your network — only metadata reaches our dashboard
- Opaque bearer-token forwarding — we never broker or store credentials
What we inspect. What we store. What never leaves your network.
- The Outpost binary runs entirely inside your own network. Tool-call arguments, results, and credentials never leave your infrastructure — not even to our hosted control plane.
- Only three kinds of metadata ever reach the hosted control plane: SHA-256 hashes of tool definitions, the tool definitions themselves (near-public schema, not customer data), and aggregated numeric statistics — call counts, latency percentiles, error rates.
- Tool-definition security scanning runs on the hosted control plane against definitions only, triggered on change — never per call, and never against your call payloads.
Built for security review from day one
The checkpoint in front of your agents has to earn the same trust it enforces.
Payloads never leave your network
The proxy runs entirely inside your infrastructure. Only schema hashes, tool definitions, and aggregated statistics ever reach our hosted control plane.
Opaque credential forwarding
Outpost forwards bearer tokens between your agent and your MCP server. It never mints, stores, or brokers OAuth credentials.
Every verdict is structured, never blind trust
Scanner output is treated as untrusted input and validated against a strict schema before it can influence an alert — it never directly drives blocking behavior.
Published, not promised
Our false-positive and false-negative rate against MCPTox, AgentDojo, and MSB is published and refreshed every release.
Pricing
Start free on our managed cloud. Upgrade as your fleet grows, or talk to us about Enterprise VPC deployment.
Free and open source to start. No credit card required.
The self-hosted proxy binary. Free, open source, runs entirely in your network.
- Full structural validation & circuit breaking
- Schema-drift detection & tool-def pinning
- Statistical anomaly detection
- Native OpenTelemetry export
- Community support
OSS binary plus the hosted control plane — dashboard, alerts, and tool-def scanning.
- Everything in OSS
- Up to 2M proxied calls / month, usage billed after
- Fleet dashboard across every connected instance
- Tool-definition security scanning (scan-on-change)
- Email & Slack drift/anomaly alerting
For startups selling into enterprise — longer retention and a private control plane option.
- Everything in Team
- SaaS or private-VPC control plane
- Extended telemetry retention
- Priority support
For regulated buyers — a fully self-hosted license, control plane included.
- Everything in Business, fully self-hosted
- Air-gapped deployment support
- Dedicated support & onboarding
- Red-team engagement available
| Capability | OSS | Team | Business | Enterprise |
|---|---|---|---|---|
| Reliability | ||||
| Structural validation & circuit breaking | ||||
| Schema-drift detection & tool-def pinning | ||||
| Fleet-wide dashboard | ||||
| Security | ||||
| Statistical anomaly detection | ||||
| Tool-definition security scanning | ||||
| Published detector accuracy report | ||||
| Deployment | ||||
| Self-hosted proxy binary | ||||
| Hosted control plane | ||||
| Private-VPC control plane | ||||
| Fully self-hosted control plane | ||||
FAQ
Ready when you are.
Download the binary and point it at your MCP servers. It runs entirely inside your own network.
Speak to Outpost engineering
Have questions about security scanning, self-hosted deployment, or the hosted control plane? Drop us a line.
Direct Line
Skip the sales gate. You will reach the engineering team directly.
Put a checkpoint in front of your agents.
Self-host the OSS binary today, or talk to us about the hosted control plane for your fleet.