MCP Jail: confine local MCP servers to the files their tools declare

Open-source CLI that locks each local MCP server to declared paths. Teams pay for shared policies and audit logs.