Support for ABAC and Virtual Server Packaging

[mohab4]

Hi team,

I’m exploring this tool and would like to know:
1. Does it support Attribute-Based Access Control (ABAC), or is there a way to implement fine-grained attribute policies? where the admins of the MCP server can control which attributes in the API response for example can be accessed with the MCP clients.
2. Does it provide features for packaging virtual servers?

Appreciate any clarification.

Thanks!

[crivetimihai]

Hi,

1. Yes, RBAC and ABAC are supported, including fine-grained policies via OPA (Open-Policy Agent) using our plugins/
2. Yes, you can configure virtual servers from multiple upstream MCP servers, REST APIs or A2A Agents, and expose them as STDIO (via wrapper), SSE or Streamable HTTP (or custom transports) using the virtual server feature.

[mohab4]

Hi @crivetimihai,

1. I have one question regarding the second point, Is it possible to pack the tools on a virtual server and export them to be hosted or deployed on an another gateway or host.
2. Secondly, is it possible to use the ibm context forge to transform mTLS based APIs into MCP servers where the certificate is consumed along with the client ID and client secret.