Enterprise zero-trust MCP gateway from NetFoundry that provides secure access to MCP servers without exposing them to the network. Built on Identity-First Reachability with no open inbound ports, no VPNs, and no firewall changes. Supports multi-backend aggregation, tool namespacing, structural permission filtering, per-client session isolation, centralized multi-user management, and role-based access control. Denied tools are removed from the registry entirely rather than checked at runtime. Paired with an LLM Gateway supporting semantic routing across OpenAI, Anthropic, Azure, Bedrock, Vertex AI, and Ollama with built-in PII detection and prompt injection filtering.