Security gateway for MCP servers. Shadow-mode logs, per-tool policies, optional Ed25519-signed receipts. npx protect-mcp -- node server.js
