MCP Discovery and Security

Plan requirement: Discovery and inventory are included on Enterprise plans. Active DLP policy inspection on stdio MCP calls requires Enterprise with runtime enforcement.

The Orthalon MCP Security Agent automatically inventories Model Context Protocol (MCP) server configurations across developer workstations and provides real-time DLP inspection for stdio tool-call arguments.

1. Option A: Built-in Desktop Governance (Recommended)

If you use the Orthalon Desktop Suite, MCP governance is built-in and runs automatically in the background on http://127.0.0.1:4120:

• Automatic Client Discovery: Scans and inventories MCP configurations across Claude Desktop, Cursor, and VS Code.
• Zero-Config Tool DLP: Monitors tool executions and prevents sensitive credentials from leaking into external MCP servers.
• Live Counter in Tray: View real-time MCP tool call statistics and blocked violations in your menu bar.

2. Option B: Standalone MCP CLI Agent

For CI/CD pipelines, automated build agents, or headless environments:

export ORTHALON_SENSOR_KEY="sk_orthalon_your_mcp_key_here"
export ORTHALON_ORGANIZATION_ID="org_your_org_id"

node orthalon-mcp-agent.cjs --dry-run

node orthalon-mcp-agent.cjs --watch=60

3. Supported MCP Client Locations

The agent automatically discovers configuration files in the standard locations:

• Claude Desktop (macOS): ~/Library/Application Support/Claude/claude_desktop_config.json
• Claude Desktop (Windows): %APPDATA%\Claude\claude_desktop_config.json
• Cursor IDE: ~/.cursor/mcp.json
• Windsurf IDE: ~/.codeium/windsurf/mcp_config.json

4. Wrap Sensitive stdio Tools for Active DLP

To apply inline DLP inspection, redaction, or blocking on MCP tool arguments in your client configuration:

{
  "mcpServers": {
    "database-cli": {
      "command": "orthalon-mcp-agent",
      "args": ["wrap", "--", "npx", "-y", "@modelcontextprotocol/server-postgres", "postgresql://localhost/prod"]
    }
  }
}

When an AI model attempts to execute a tool call with sensitive customer records or API secrets, Orthalon intercepts the payload, applies your policy, and records the event in Discovery → Violations.