Act on this, mostly signal

SentinelMCP adds a stateless policy firewall and token budgets for MCP

What to do

Put SentinelMCP in front of MCP servers to check identity, policy and 7-day budgets on each tool call.

Why

The proxy enforces Origin validation and per-tool budgets, and the feature list is confirmed from the project.

What the research found

SentinelMCP is a stateless policy firewall and token-cost proxy for MCP servers that checks identity, policy and budget per tool call, with Origin validation and 7-day budgets.

Claims and how well the evidence supports them

Stateless design with no database or sticky sessions 94%
7-day sliding-window budgets on a 168-bucket hourly circular buffer 99%
Origin validation on every request, loopback-only by default 98%
JWT verification via JWKS, asymmetric algorithms only 99%

Evidence

github.com https://github.com/asctttt/sentinelmcp

Actionability rated medium.