VellaVeto — blocks unsafe MCP tool calls by default

Hacker News

Reposting because the March thread linked a now-outdated repo, and the project has changed substantially. VellaVeto is a fail-closed gateway between an AI agent and its MCP tools. Every tool call is evaluated before execution; if evaluation fails for any reason, the call is denied. Concrete example: under shield mode, a filesystem server trying to read ~/.ssh/id_rsa is denied by default. A list_files /tmp call from the same server is allowed. What it does not solve: prompt injection, model-level jailbreaks, or supply-chain attacks in server packages. It only controls what crosses the tool-call boundary. Since March, I added three zero-config protection levels, topology discovery, tamper-evident audit, Consumer Shield, and MCPSEC, an open benchmark for MCP gateways. The feedback I’d most like: Is the tool-call boundary the right place to enforce MCP security? Are the MCPSEC attack classes sensible? What important attack classes am I still missing?

Visit product View on Hacker NewsMar 28, 2026

Share card

Actual performance

2points

1comments

Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →

Product HuntOn track for Day 1 leaderboard · Strong signals: agent, model, mcp · Missing: mac, agents, macos

80%80% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Indie HackersFits the IH revenue-focused audience · Missing: supports, reddit linkedin, podcasting

53%53% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Strong signals: calls · Missing: plus, platform, intuitive

40%40% predicted probability of success on AppSumo, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Strong signals: way · Missing: mobile apps, ios, personal

38%38% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

Hacker NewsMay not resonate with HN audience · Strong signals: lua, filesystem, ide · Missing: https docs, excited, just released

30%30% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

15%15% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

5%5% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

Cordon – Security gateway for MCP tool calls with HITL approvals31%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Cordon – Security gateway for MCP tool calls with HITL approvals

Hacker News2

VimFreeDrag – Move Blocks of Text in Vim53%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

VimFreeDrag – Move Blocks of Text in Vim

Hacker News5

Authorize MCP tool calls without giving agents the credentials27%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Authorize MCP tool calls without giving agents the credentials

Hacker News4

Authorize MCP tool calls without giving agents the credentials35%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Authorize MCP tool calls without giving agents the credentials

Hacker News3

mcp-chat, chat server using MCP tool calls42%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

mcp-chat, chat server using MCP tool calls

Hacker News4

DayBrix, a daily falling-blocks webgame44%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

DayBrix, a daily falling-blocks webgame

Hacker News2

Qi Blocks – collection of 48 free blocks for Gutenberg48%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Qi Blocks – collection of 48 free blocks for Gutenberg

Hacker News3

Hijax: Intercept Ajax Calls59%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Hijax: Intercept Ajax Calls

Hacker News1

How to overcome your creative blocks45%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

How to overcome your creative blocks

Hacker News2

1Baton – a no-code tool for chaining API calls37%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

1Baton – a no-code tool for chaining API calls

Hacker News5

Browse all products Analyze your launch