Show HN: An MCP Gateway to block the lethal trifecta

14 76SlashDolphin 1 9/12/2025, 3:22:00 PM github.com ↗

Hi there, me and some friends were inspired by Simon Willison's recent post on the "lethal trifecta" (https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ ) and started building a gateway to defend against it.

The idea: instead of connecting an LLM directly to multiple MCP servers, you point them all through a Gateway.

The Gateway:

- Connects to each MCP server and inspects their tools + requirements

- Classifies tools along the "trifecta" axes (private data access, untrusted content, external comms)

- When all three conditions are about to align in a single session, the Gateway blocks the last step and tells the LLM to show a warning instead.

That way, before anything dangerous can happen, the user is nudged to review the situation in a web dashboard.

We'd love for the HN community to try it out: https://github.com/Edison-Watch/open-edison

Any feedback very welcome - we'll be around in the thread to answer questions.

Comments (1)

warthog · 56m ago

Seen a hack using whatsapp mcp recently - this seems promising

Show HN: DWS OS, a Plan 9 Inspired Web "OS" (dws.rip)

Show HN: An MCP Gateway to block the lethal trifecta (github.com)

Show HN: I made a generative online drum machine with ClojureScript (dopeloop.ai)

Show HN: Small Transfers – charge from 0.000001 USD per request for your SaaS (smalltransfers.com)

Show HN: C++ Compiler Support Page (cppstat.dev)

Show HN: Consentless – A minimalist, privacy-preserving traffic counter (consentless.joeldare.com)

Show HN: Making a cross-platform game in Go using WebRTC Datachannels (pion.ly)

Show HN: Term.everything – Run any GUI app in the terminal (github.com)

Show HN: I built a minimal Forth-like stack interpreter library in C

Show HN: OllaMan – An Elegant GUI for Ollama AI Model Management and Chat (ollaman.com)

Show HN: I built an AI that roasts your website and gives tips to fix it (ai-roast-vert.vercel.app)

Show HN: TrailDrop – Lightweight GPX sharing and monetization platform (traildrop.app)

Show HN: Pbar.io – Distributed progress bars that work in terminals and browsers (pbar.io)

Show HN: TailGuard – Bridge your WireGuard router into Tailscale via a container (github.com)

Show HN: I built a tool to find trading signals that aren't just random luck (hikaro.app)

Show HN: Fast Tor Onion Service vanity address generator (github.com)

Show HN: Haystack – Review pull requests like you wrote them yourself (haystackeditor.com)

Show HN:New Qwen3-Next is coming（Free&Unlimited to use) (mixhubai.com)

Show HN: Runner – the anti-vibe coding agent (runnercode.com)

Show HN: I made a script that gives me fake calls to escape boring moments

Show HN: Bottlefire – Build single-executable microVMs from Docker images (bottlefire.dev)

Show HN: Asxiv.org – Ask ArXiv papers questions through chat (asxiv.org)

Show HN: HumanAlarm – Real people knock on your door to wake you up (humanalarm.com)

Show HN: CrabCamera – Cross-platform camera plugin for Tauri desktop apps (crates.io)

Show HN: AvoSmash – AI video storytelling made easy (avosmash.io)

Show HN: Polaris Audit – Website Compliance Scanner with Fix Instructions

Show HN: An AI app to help you generate stock research report and save you hours (equity-analyzer.com)

Show HN: 54321 5 Senses Grounding PWA – Try this if you feel anxious (54321.tools)

Show HN: Willow – a configurable file watcher and rule‑based file manager (github.com)

Show HN: Specification-Driven Development for OpenAI Codex (github.com)

Show HN: Shellcast.tv – Stream your vibe coding (shellcast.tv)

Show HN: Attempt – A CLI for retrying fallible commands (github.com)

Show HN: An Open Source XR(AR/VR) Operating System (getxeneva.com)

Show HN: Vicinae – a native, Raycast-compatible launcher for Linux (github.com)

Show HN: Real-time texture compression in Three.js (ludicon.com)

Show HN: Kafkatop, top-like CLI for Kafka (github.com)

Show HN: Story to Manga – Paste a story, get a manga (storytomanga.com)

Show HN: Lightweight tool for managing Linux virtual machines (github.com)

Show HN: Forked styled-components with optimizations (40% faster for Linear) (github.com)

Show HN: Uniprof – Universal CPU profiler for humans and AI agents (github.com)

Show HN: Radiccio – Mac music player – local files, Apple Music, Plex, Jellyfin (radiccio.music)

Show HN: I recreated Windows XP as my portfolio (mitchivin.com)

Show HN: Swimming in Tech Debt (helpthisbook.com)

Show HN: Browse the new MCP registry with Remote MCP (github.com)

Show HN: Open-sourcing our text-to-CAD app (github.com)

Show HN: Element 0 – A small embeddable Lisp written in Zig

Show HN: OpenCV over WebRTC (in Go) (github.com)

Show HN: Newlang.app – Practice EN, ES, PT, FR, IT, DE (newlang.app)

Show HN: Superagents – connect spreadsheets to any database, API or MCP server (sourcetable.com)

Show HN: Ion, a Rust/Tokio powered JavaScript runtime for embedders (github.com)

Show HN: An MCP Gateway to block the lethal trifecta

Comments (1)