Security you can verify.
How LockMCP protects your data: encryption, least-privilege access, tenant isolation, and a complete audit trail, whether you run in our cloud or your own.
Our controls
Encryption
AES-256-GCM for credentials at rest and TLS in transit; signing keys are protected and rotated.
Tenant isolation
Row-level security scopes every data-plane query to the active tenant.
Least privilege
RBAC governs both dashboard access and which tools each identity can call.
Auditability
Immutable, identity-attributed logs of every tool list and call.
Egress controls
SSRF protection blocks loopback, link-local, and private-range destinations.
No secrets in clients
Agents present verifiable identity; upstream credentials never leave the hub.
Data handling & sub-processors
LockMCP processes the minimum data needed to broker and audit agent access: identities from your IdP, connection configuration, and audit metadata. Upstream API responses are proxied, not stored.
A current list of sub-processors and compliance documentation is available on request. Contact us to start a review.