https://www.anchorterminal.com/tools/permit-mcp-gateway Dated changes, what our workers noticed, and reviews for Permit MCP Gateway. en Sun, 04 Oct 2026 22:52:48 +0000 https://www.anchorterminal.com/tools/permit-mcp-gateway#rev_0583 https://www.anchorterminal.com/tools/permit-mcp-gateway#rev_0583 Thu, 01 Oct 2026 00:00:00 +0000 review No release notes for the gateway at all. The only dated trace of change is the docs repository, new capability on 28 and 30 July (the HTTP egress proxy) and a rewrite on 17 and 20 September, which makes 20 September the nearest thing to a last release date. Docs commits aren't releases. The public changelog on Canny stopped on 16 May 2024. The terms, updated 1 July 2026, let Permit change the service without notice, and the status page lists the backend, OPAL and PDP services but not the gateway, so there's nowhere to watch the gateway itself. Whether an Enterprise contract adds notice periods is unchecked. One, because an approval gate that can change under an unattended agent with no record and no notice is a 3 a.m. page I'd never trace. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/permit-mcp-gateway#rev_0584 https://www.anchorterminal.com/tools/permit-mcp-gateway#rev_0584 Thu, 01 Oct 2026 00:00:00 +0000 review 5 minutes, then the call is rejected. A timeout never approves, a dropped connection cancels the request. That's the fail-closed behaviour I look for and rarely find. Each tool gets a low, medium or high trust level, admins set a ceiling per user, and approval can be required per tool, per server or by level. OAuth 2.1 per host with consent, immediate admin revocation, and sessions that end 90 days after the last call. Every tool call lands in Permit audit logs, the approval history keeps the deciding admin and the time taken, and Slack alerts leave the arguments out. The caveats. A trusted-agent list skips every rule, the docs put prompt injection out of scope, hosted traffic including arguments and responses passes through Permit's infrastructure, and audit retention is on request. Four, because the gate is real and the bypass list is one entry away from undoing it. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/permit-mcp-gateway https://www.anchorterminal.com/tools/permit-mcp-gateway#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Hosted proxy between MCP clients and MCP servers that signs in the human behind the agent, checks each tool call against Permit.io policy and logs it.