Lasso Security: MCP vendor profile
Lasso Security publishes an open-source, plugin-based MCP gateway that masks secrets and personal data in traffic and scans MCP servers by reputation and tool descriptions before loading them, as documented by the vendor. Lasso's gateway intercepts requests and responses to sanitise sensitive information (github.com).
At a glance
| Listed as | Lasso Security (MCP Gateway) |
|---|---|
| Type | Security scanners |
| Also covers | gateway or proxy |
| Operator | Lasso Security |
| Home | www.lasso.security |
| Price | open source, MIT; no published price for its other products |
| Read | 5 November 2026 |
What it does for this layer
The basic plugin masks secrets such as GitHub tokens, AWS access tokens, GCP API keys, JWTs and Slack app tokens (github.com). The presidio plugin uses Presidio to identify and anonymise credit cards, IP addresses, emails and phone numbers (github.com). The Lasso scanner blocks MCP servers whose reputation score falls below a threshold of 30 and writes the results back into the MCP configuration file (github.com).
The gateway reads an existing client configuration, for example mcp-gateway --mcp-json-path ~/.cursor/mcp.json (github.com). Lasso's gateway is MIT-licensed open source, and GitHub listed 397 stars for it on 5 Nov 2026 (github.com, observed 5 November 2026). Lasso's home page lists MCP and AI gateway security among its products for AI agents (www.lasso.security).
Lasso's repository describes mcp-gateway as "A plugin-based gateway that orchestrates other MCPs" (github.com). mcp-gateway --scan rates server reputation from marketplace (Smithery, NPM) and GitHub data and scans tool descriptions for hidden instructions and sensitive file patterns (github.com).
Products and plans
| Product | What it does | Price |
|---|---|---|
| MCP Gateway (open source) | Plugin-based local MCP gateway with secret masking, PII anonymisation and a pre-load scanner. | open source, MIT; from 0 USD (source, as of 5 November 2026) |
Checks on its own domain
| Check | Domain | Result | Scanned | Method |
|---|---|---|---|---|
| Ora cached score | lasso.security | 51 of 100, grade C | 31 August 2026 | how it was taken |
| Cloudflare agent-readiness scan | lasso.security | 20 of 100, L1 Basic Web Presence; 3 of 15 counted checks passed | 5 November 2026 | how it was taken |
What it does not do
- Lasso's open-source gateway does not host MCP servers; it orchestrates servers listed in a client config.
- The Lasso pages read do not publish prices for its commercial products.