mcp-hangar/mcp-hangar

Overview

MCP policy enforcement plane that applies deterministic policy to every Model Context Protocol call. Handles identity, RFC 8707 audience binding, tool schema digest pinning, and maintains a full audit trail. Written in Python, self-hosted, and released under MIT.

Best for

Best for
Teams needing auditable, policy-controlled MCP infrastructure

Use cases

• Enforce identity-based access policies on MCP calls
• Pin tool schemas to prevent drift or tampering
• Maintain an audit trail of all MCP interactions

How to use

Install

pip install mcp-hangar

Tested with

Claude Desktop, Claude Code, Cursor

Notes

MCP policy enforcement plane that applies deterministic policy to every Model Context Protocol call. Handles identity, RFC 8707 audience binding, tool schema digest pinning, and maintains a full audit trail. Written in Python, self-hosted, and released under MIT.

15 stars on GitHub. Last updated 2026-09-16. Licensed MIT.

Use cases

• Enforce identity-based access policies on MCP calls
• Pin tool schemas to prevent drift or tampering
• Maintain an audit trail of all MCP interactions

Pros

• Deterministic policy application across all MCP calls
• Includes audit trail for compliance
• MIT licensed and self-hosted for data control

Cons

• Very early stage with only 15 GitHub stars
• Requires self-hosting and ongoing maintenance
• Limited ecosystem adoption and community support

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.