MCP Gateway Security Skill

Context

This skill applies when:

• Securing MCP gateway communications between clients and the EP MCP Server
• Implementing token-based authentication for MCP client connections
• Validating and sanitizing MCP requests at the gateway boundary
• Configuring audit logging for all parliamentary data access through the gateway
• Implementing defense-in-depth for multi-server MCP deployments
• Managing secrets and credentials for EP API backend authentication
• Protecting against common MCP protocol attack vectors

MCP gateways are a critical security boundary. All parliamentary data requests flow through the gateway, making it the primary enforcement point for authentication, authorization, input validation, and audit logging.

Rules