MCP(Model Context Protocol)の制御プレーンランタイム。 ゲートウェイ、ボルト、ポリシーエンジン、およびAIエージェントと下流MCPサーバー間のあらゆるツールコールの監査証。

生産でMCPを実行するために必要なコアインフラストラクチャコンポーネントをサポート:ゲートウェイルーティング、ランタイム管理、ポリシーの執行、認証管理、および監査ロギング。

主な保証:

• 有効なボルト。 秘密は残り(PBKDF2 + AES-GCM)で暗号化され、実行時にサーバー側を注入されます。 クライアントは、生の資格情報を見ることはありません。
• Policyエンジン。 パーユーザー、パーツール機能フィルタリング付きRBAC / ABAC。 リスクの高い操作のためのオプションのヒトインループ承認。
• 監査証跡。 すべてのツールコールは、発信者アイデンティティ、ポリシー決定、および結果とともに記録されます。 ログに秘密は含まれていません。
• 管理されたランタイム。 ライフサイクル制御と自動回復でMCPサーバーを下流に監視します。
• プロトコルの互換性。 標準のMCP上流、および共有ゲートウェイの下流互換性により、Peta Coreは現在サポートしています.

Peta Core

A control-plane runtime for MCP (Model Context Protocol). Gateway, vault, policy engine, and audit trail for every tool call between AI agents and downstream MCP servers.

Supports the core infrastructure components required to run MCP in production: gateway routing, runtime supervision, policy enforcement, credential management, and audit logging.

Key guarantees:

• Credential vault. Secrets stay encrypted at rest (PBKDF2 + AES-GCM) and are injected server-side at execution time. Clients never see raw credentials.
• Policy engine. RBAC/ABAC with per-user, per-tool capability filtering. Optional human-in-the-loop approval for high-risk operations.
• Audit trail. Every tool call is logged with caller identity, policy decision, and outcome. Secrets are never included in logs.
• Managed runtime. Supervises downstream MCP servers with lifecycle controls and automated recovery.
• Protocol compatibility. Standard MCP upstream, plus downstream compatibility for the shared gateway flows that Peta Core currently supports. Standard server-initiated reverse requests (sampling, roots, elicitation) are intentionally not exposed in the current shared runtime.
• Self-hosted. On-premises deployment model. No hosted SaaS dependency.

Quick Start | Website | Documentation

---

Architecture

Peta Core sits between MCP clients (Claude, ChatGPT, Cursor, n8n, or any MCP-compatible client) and downstream MCP servers. From the client’s perspective, it connects to a single MCP server. Behind that endpoint, Peta Core routes to multiple downstream servers using standard MCP for the shared forward-request flows it supports.

Peta Core is one component of the Peta MCP stack:

• Peta Core (this repository) — MCP gateway, credential vault, policy engine, and audit runtime.
• Peta Console — Admin UI for users, servers, policies, approvals, and audit logs.
• Peta Desk — Desktop client for approval workflows and per-user server configuration.

This repository contains only Peta Core. See docs.peta.io for the full stack.

---

Features

MCP Gateway

• Transparent MCP proxying. Acts as an MCP server upstream and an MCP client downstream. Routes tool calls via namespaced identifiers (serverId::toolName).
• MCP 2025-11-25 support. Modern clients can use stateless server/discover, POST-only Streamable HTTP, subscriptions/listen, and OAuth resource metadata behind an opt-in rollout flag while legacy sessionful clients remain supported.