Deploy and Host McpVanguard

McpVanguard is a security proxy for the Model Context Protocol (MCP).
It sits between AI agents and system tools and applies three layers of inspection:

• Static threat signatures
• Semantic intent scoring (LLM-based)
• Behavioral / entropy-based throttling

About Hosting

Deploying McpVanguard on Railway allows you to expose MCP tools securely over the internet.

Using the SSE (Server-Sent Events) bridge:

• Remote agents connect through an authenticated endpoint
• TLS is handled automatically by Railway
• Redis can be attached for persistent session and rate-limit state

This setup allows the proxy to run continuously with minimal infrastructure overhead.

Common Use Cases

Securing Remote Agents

• Expose MCP tools to remote LLMs (e.g. Claude, GPT) over SSE
• Protect against prompt injection and system escape attempts

Path Isolation

• Enforce Safe Zones and filesystem boundaries
• Prevent directory traversal and unauthorized file access

Auditing & Compliance

• Record interaction metadata through shadow-mode logging
• Integrate with VEX protocol for verifiable audit trails

Dependencies for McpVanguard Hosting

Runtime

• Python 3.11+

Optional (Recommended)

• Redis (for Layer 3 behavioral state and scaling)
• LLM API Key (for Layer 2 semantic scoring)

Deployment Dependencies

• Railway Redis Plugin
• MCP-compatible server
• McpVanguard proxy

Implementation Details

Railway uses Nixpacks to detect Python automatically.
You can attach Redis and pass its URL via environment variables.

Start Command

vanguard sse \
  --host 0.0.0.0 \
  --port 8080 \
  --server "python -c 'import sys; print(\"Protected Server Running\")'"

Required Environment Variables

VANGUARD_MODE=enforce
VANGUARD_API_KEY=your_secure_authentication_token
PORT=8080
VANGUARD_REDIS_URL=${{Redis.REDIS_URL}}

Why Deploy

Railway provides a simple way to deploy and run infrastructure:

• Managed hosting with automatic TLS
• Easy Redis integration
• Supports scaling without manual configuration

By deploying McpVanguard on Railway, you can run a secure MCP proxy alongside your agents, services, and databases in one place.