Add untrusted mode: MCP servers that never possess credentials - #5914

Draft

JAORMX wants to merge 16 commits into

mainfrom

feat/untrusted-mcp-egress-broker

Commits on Jul 27, 2026

Add Wave 0 security foundations for untrusted MCP servers
JAORMX
committed
1b6fadc
Add untrusted mode: CRD, single-tenant pods, egress broker
JAORMX
committed
8ed9930
Add consent-on-demand for upstream providers
JAORMX
committed
b0a6e1e
Add untrusted-mode production readiness
JAORMX
committed
de940df
Add response scanning and audit to the egress broker
JAORMX
committed
fc73e38
Document untrusted mode architecture and operations
JAORMX
committed
87527f4
Harden untrusted mode after duplication and reuse review
JAORMX
committed
5ba7361
Fix untrusted-mode data plane after live-cluster validation
JAORMX
committed
68238fc
Fix codespell findings and the DNS stub test race
JAORMX
committed
1f8b5d6
Honor permissionProfile egress on Kubernetes via NetworkPolicy
JAORMX
committed
8d83bbf
Gate untrusted mode behind an opt-in feature flag
JAORMX
committed
5a9beee
Stabilize untrusted CA rotation and CI
JAORMX
committed
fabf3e5
Regenerate swagger docs after rebase
JAORMX
committed
7faf79b
Fix rebase fallout in vmcp test files
JAORMX
committed
e0463c7
Restore sentinel-preserving legacy-SSE error wrap
JAORMX
committed
325089a
Bring wrapBackendError back under the cyclomatic limit
JAORMX
committed
bc1fc10