MCPOne sits between your application and supported provider integrations. Deployment and control configuration remain your responsibility.
MCPOne offers configurable controls mapped to sector-relevant frameworks. Select and validate the controls appropriate for your deployment.
Configurable controls mapped to major frameworks; coverage varies by deployment and enabled controls.
| Framework | Federal Civilian | DoD / IC | Healthcare | Financial | Commercial |
|---|---|---|---|---|---|
| FedRAMP High | |||||
| NIST AI RMF | |||||
| OMB M-24-10 | |||||
| CMMC | |||||
| HIPAA/HITECH | |||||
| PCI-DSS v4 | |||||
| SOC 2 | |||||
| GDPR/CCPA | |||||
| ITAR/EAR | |||||
| FISMA/DISA |
Incoming prompt is evaluated against the app's enabled policy controls. Block, warn, or redact based on the configured rule outcome.
Deterministic, test-covered structured identifier detection supports configured redaction before provider routing.
Built-in safety floors evaluate CBRN threats, self-harm, hate speech, violent speech, and sexual content. Hard blocks apply only for enabled enforced rails.
Configured routing selects an available provider. PHI routing is blocked when an enabled BAA control does not cover the selected provider.
Enabled response controls are evaluated before egress. Usage events record configured audit metadata for review.
MCPOne is OpenAI-API compatible. Point your existing SDK at MCPOne's endpoint — configured controls can be applied without changing your client API shape.
# Before MCPOne — direct to OpenAI
- client = OpenAI(api_key="sk-...")
- client.base_url = "https://api.openai.com"
# After — one line change, configured controls
+ client.base_url = "https://mcpone.agency.gov"
# Enabled controls apply to this request:
response = client.chat.completions.create(
model="gpt-4",
messages=[{"role":"user", "content": prompt}]
)
# ^ PII redacted, policy checked, safety scored,
# audit metadata recorded when enabledConfigure and validate controls for your organization before shipping AI features.
No credit card required · Deployment options vary · Local Ollama option