Lasso Security MCP GatewayLasso Security | Datasheet DS-014 | Rev 2026-11-03 |
| Total 3.20 / 10 | Ranks fourteenth of 14 | |
| Status: Open source under the MIT licence. | ||
In short: Lasso scores 3.20 out of 10 and ranks fourteenth of 14 in this guide. Its strongest area is deployment, and its weakest are per-call authorization and human approval. Deployment is listed as Open source, local. It is free under the MIT licence. Each score below has a reason and a dated source.
Features
- Central router for MCP servers
- Token and secret masking guardrail
- Lasso API guardrails
- Per-guardrail request and response logs
Specifications
| Parameter | Value | Source |
|---|---|---|
| Product type | Open source MCP router with guardrails | [lasso-gh] |
| Licence | MIT | [lasso-gh] |
| Guardrails | Basic masking, Lasso API, plugins | [lasso-gh] |
| Price as published | Free open source | [lasso-gh] |
How does Lasso score on each criterion?
| Criterion | Weight | Score | Reason | Source |
|---|---|---|---|---|
| G1 Identity-bound per-call authorization | 25 | 2 | The gateway routes requests through guardrail plugins, but identity-bound authorization was not found. | [lasso-gh] |
| G2 Credential brokering | 20 | 3 | Token and secret masking hides credentials in traffic, but credential brokering was not found. | [lasso-gh] |
| G3 Human approval and escalation | 15 | 2 | No human approval step was found. | [lasso-gh] |
| G4 Server registry and discovery | 10 | 3 | Servers are configured in a local config file; a registry or discovery was not found. | [lasso-gh] |
| G5 Audit evidence | 10 | 5 | Detailed logs of requests and responses are kept for each guardrail. | [lasso-gh] |
| G6 Standards | 10 | 2 | No MCP authorization standards were named. | [lasso-gh] |
| G7 Deployment and buying clarity | 10 | 8 | Free under MIT; advanced guardrails use Lasso's API. | [lasso-gh] |
| Total | 100 | 3.20 | Sum of score times weight, divided by 100. | |
Typical deployment
Self-hosted or local.
Pricing as published
Free under MIT.
Works alongside your identity provider?
No identity provider integration was documented. [lasso-gh]
Frequently asked questions
- Does Lasso work alongside my identity provider?
- No identity provider integration was documented.
- How is Lasso deployed?
- Self-hosted or local.
- What does Lasso cost?
- Free under MIT.
How does it compare?
Revision history
| Rev | Change |
|---|---|
| 2026-11-03 | First issue of this datasheet. |
Sources
- lasso-security/mcp-gateway README [lasso-gh] read 2026-11-03
By The Datasheet desk · Published and reviewed 2026-11-03