MCP-GLP-AUDIT-PROXY

Your AI agents touch lab systems.
Who keeps the audit trail?

AI agents can now read and write in the tools your lab already owns. Without a record of who did what, when, and through which AI tool, that is a data-integrity gap. mcp-glp-audit-proxy is the control layer between the AI brain and your tools: every tool call is checked, optionally approved, and logged in a tamper-evident chain.

Request a demo

GitHub PyPI Download flyer (PDF)

How it works

AI brain → control layer → tools you already own

1. Intercept

The proxy sits between your MCP client (the AI agent) and your MCP servers. Every tool call passes through it.

2. Control

An allow/denylist decides what may run. Write operations can require human approval (glp_approve). If something is wrong, it fails closed: the call is blocked, not let through.

3. Record & verify

Each call is appended to a JSONL hash chain (RFC 8785 canonical JSON + SHA-256). The verify CLI detects any tampering, and --print-head lets you anchor the chain head externally.

Community vs Pro

Capability	Community: free, MIT, available now (v0.3.0)	Pro: coming soon
MCP proxy, allow/denylist, fail-closed	Yes	Yes
Optional human approval for writes	Yes (glp_approve)	Yes
Audit storage	Tamper-evident JSONL hash chain	+ SQL/MSSQL and S3 Object Lock storage
Integrity proofs	SHA-256 chain, verify CLI, --print-head	Same as Community
Before/after values	—	Yes
Reports	RTM + sample OQ report	+ PDF/CSV reports, IQ/OQ validation pack
Flyer	Download flyer (PDF, EN) · ES	—
How to get it	PyPI / GitHub	Coming soon: Get notified

Validation pack

RTM: a requirements traceability matrix mapping requirements to tests (91 automated tests in Community).
Sample OQ report: a starting point for your own operational qualification.
verify CLI: re-checks the whole hash chain; --print-head prints the chain head for external anchoring.
Pro (coming soon): IQ/OQ validation pack: installation and operational qualification documentation, plus PDF/CSV reports.

These materials support your CSV process; your organisation remains responsible for validating its own use.

See it on your stack

A short demo on one workflow with the tools you already own.

Request a demo Download flyer (PDF)

Contact

mcp-glp-audit-proxy is designed to support GLP / 21 CFR Part 11 / EU GMP Annex 11 workflows. It does not by itself make a system compliant; validation of each use remains the responsibility of the user organisation.
© Antonio Castellon · [email protected]