# Stacktrace Personal Agent Gateway

The gateway for the personal agents your customers bring. Web page: https://stacktrace.ai/gateway/

Your customers now arrive through personal agents. The gateway verifies each one, holds risky actions for the customer, and records everything.

## What the Gateway does

### See. Know who is calling.

Every agent is verified before it gets in. A known name from the wrong domain is blocked.

### Control. Set the rules once.

Pick which tools need the customer's yes. Change it in the console, not your code.

### Audit. Keep the record.

One masked record per session: the agent, the customer and every decision.

## How it works

1. An agent connects to your MCP endpoint at the gateway and presents its identity, or registers.
2. The customer signs in with your identity provider and sees the agent, its identity grade and the scopes requested.
3. The agent calls a tool. The gateway checks the scope, holds consequential writes for confirmation, and records the step.
4. The gateway calls your MCP server with a short-lived signed token naming the agent, customer, grant, session and scopes. Your server verifies one signature.
5. Your systems carry the session on through OpenTelemetry, with the SDK.

## Direct MCP < Behind Stacktrace Gateway

| Aspect | Direct MCP | Behind Stacktrace Gateway |
| --- | --- | --- |
| Who is calling | A self-declared name | Graded, checked against its domain |
| Scopes | Changed by a deploy | Changed in the console |
| Consequential writes | Run immediately | Held for the customer's yes |
| Record | Server logs | Masked session, every decision |

## Standards

- MCP authorization: OAuth 2.1 and dynamic registration.
- Personal Agent Protocol: Signed sessions and confirmed operations.
- OpenTelemetry: Trace context into your systems.
- Works with: Muse, any MCP agent with OAuth, Personal Agent Protocol agents.

## Questions

### Do I have to change my MCP server?

No. Your server keeps its own scopes.

### Does the gateway see my customers' data?

Only in transit. At rest it keeps a masked copy, never credentials or account numbers.

### Which agents work today?

Any personal agent that speaks MCP with OAuth.

### How do I get it?

Book a demo. We set it up with you.

There is no self-serve sign-up. Book a demo at https://stacktrace.ai/demo/?via=gateway.