Maxion MCP Gateway

In-process zero-trust binary admission gate, prompt injection defense, and autonomous thermal governor for MCP agents.

Documentation

Maxion — Real-Time Security & Stability for MCP AI Agents

Maxion MCP Gateway Logo

Maxion MCP Gateway Architecture

CI & Quality Smithery Registry GitHub Release License: Proprietary MCP Compatible

Give your AI agents autonomy without putting your files, credentials, or computer at risk.

Maxion provides an in-process protective layer that verifies agent actions before they execute—preventing unauthorized commands, catching prompt injection attempts, and keeping your machine cool during long autonomous runs.

This repository contains a small stdio bridge (index.js) that connects an MCP client to the hosted Maxion gateway, plus quickstart documentation. The engines themselves (Maxion V16, Quezar, Diamonize) and the security gate run server-side and are not part of this repo.


The Results You Get

  • Prompt Injection Defense — Evaluates external inputs and incoming text to catch and neutralize malicious prompt injection attempts before they manipulate your tools.
  • Rogue Command Prevention — Blocks unauthorized shell commands, destructive disk operations, and unintended system modifications before execution.
  • 24/7 Hardware Protection — Actively manages compute intensity during long-running agent loops to prevent thermal throttling, loud fan noise, and system lockups.
  • Local Credential Vaulting — Keeps your API keys, tokens, and private session memories isolated in a protected local vault where agents cannot leak or expose them.
  • Zero Perceptible Lag — Executes in the background in microseconds, adding no noticeable delay to your agent's response time.
  • Frictionless MCP Setup — Works out of the box with Claude Desktop, Cursor, Windsurf, or any MCP-compatible environment.

Built for Every Customer

🏢 Engineering Teams & Enterprise

Adopt autonomous agents safely across your organization. Enforce strict tool execution boundaries, prevent data leaks, and maintain full audit visibility without adding slow network hops.

💻 Developers & Builders

Run long-running autonomous workflows overnight without babysitting your terminal. Protect your local repositories and environments from runaway loops or unintended deletions.

🤝 AI Agencies & Consultancies

Deliver agent workflows to clients with confidence. Ensure customer-facing or internal agents cannot be tricked into executing destructive actions or leaking confidential context.

⚡ Power Users & Creators

Run resource-intensive AI agent workflows locally while keeping your machine responsive, cool, and quiet.


Coordinated Protection Layers

LayerThe Outcome It Delivers
Security GateIntercepts tool calls in real time to filter prompt injections and block unauthorized actions before execution.
DiamonizeScans files and running processes for known threat signatures, quarantines anything flagged, and keeps a tamper-evident audit log of every finding.
Maxion V16Autonomous hardware governor that dynamically regulates compute load to prevent overheating and system freezes.
QuezarEncrypted local vault that isolates sensitive credentials, tokens, and agent state.

Quick Install

Via Smithery Registry:

npx -y @smithery/cli install aruuhii2yo/maxion-mcp-gateway

Run this bridge directly (add to your MCP client's config, e.g. claude_desktop_config.json):

{
  "mcpServers": {
    "maxion": {
      "command": "npx",
      "args": ["-y", "github:aruuhii2yo/maxion-mcp"]
    }
  }
}

Or connect your MCP client (Claude Desktop, Cursor, etc.) directly using the hosted endpoint on the Smithery page.

Free trial available for every user. Enter a license key to unlock unlimited, permanent access.


Live Ops Console

A live status dashboard polls this gateway's real telemetry (gate status, engine health, and the tamper-evident audit ledger) every 20 seconds — real numbers, not a screenshot:

Open the Ops Console →

The current public endpoint it polls: https://oops-fred-compromise-royal.trycloudflare.com (this is a rotating address, not a permanent one — if the dashboard shows "SIGNAL LOST," the endpoint has since moved).


Verification & Testing

Tested against 150 regression checks + 54 adversarial checks on every release to ensure stability and reliable tool execution.

Links