Jun 2026 — Aug 2026
Skylo
CloudSoftware Development Engineer Intern
- Engineered a centralized MCP Gateway that orchestrates multiple MCP servers behind role-based access control, shared security middleware and structured logging.
- Designed org-wide AI safety guardrails: system hooks and .mdc rules that stop agents from running destructive commands or unauthorized Git actions.
MCP gateway architecture. AI and developer clients reach multiple MCP servers only through one centralized gateway. Every request descends the same three checkpoints inside that boundary: authentication, role-based access control, and shared security middleware. Two recorded requests are shown. A read of repository metadata from an IDE clears every checkpoint, crosses the boundary, is routed to an MCP server, and the result is recorded. An unauthorized action from an agent is authenticated but refused by role-based access control: it stops there, never reaching the security middleware or an MCP server, and the block is recorded with the reason RBAC. Structured-log event names are illustrative.
AI / developer clients
- IDE
- Agent
- Internal
- Authenticationpass
- RBACblock
- Security middleware—
- Server 01
- Server 02
- Server 03
MCP servers
Request
▲Blocked
unauthorized action
Agent→block/RBAC
Decision trace
- [01]request.received
- [02]authentication.checked
- [03]rbac.denied
- [04]block.recorded
Recorded decisions
IDEread repository metadata
allow/MCP Server 03
Agentunauthorized action
block/RBAC
- Centralized MCP gatewayMultiple MCP servers
- Authentication / RBACCentralized access control
- Structured loggingCentralized observability
- Event names illustrative