MCP ONE
MCP ONE
by Bravent
Get Started
Bravent · The AI Compliance Infrastructure

Plug-and-Play AI Compliance
for Selected Sectors

MCPOne adds configurable technical controls for FedRAMP, HIPAA, CMMC, GDPR and related frameworks, with coverage determined by your deployment and enabled controls.

Federal CivilianDoD / ICHealthcareFinancialCommercial
Illustrative pipeline — enabled controls vary by app configuration
Policy
OMB · NIST · CMMC
PII Guard
Structured identifiers
Safety AI
CBRN · Hate · Self
Routing
Cost · Latency
Verify
Hallucination heuristic
Policy result
Identifier redaction
Safety signal
Selected provider
Heuristic review
Example request metadata
Pipeline: exampleProvider: exampleOutcome: illustrative
0
Structured Detection
0
Control Modes
0
Provider Options
0
Response Paths
Endpoint Integration

Drop In.
Configurable Controls.

MCPOne sits between your application and supported provider integrations. Deployment and control configuration remain your responsibility.

Your Application
Customer Support Bot
Internal Knowledge Base
Code Copilot
Document Q&A
Data Analytics AI
POST /v1/chat/completions
Host: mcpone.yourdomain.gov
# Configure this endpoint and enabled controls
MCPOne
MCPOneCONFIGURED
Policy Enforcement
PII Detection
Safety Classifier
Model Routing
Hallucination Heuristic
Audit & Analytics
Supported Providers
Claude (Anthropic)
GPT-4 (OpenAI)
Gemini (Google)
Ollama (On-Prem)
xAI (Grok)
Guardrailed response
delivered to your app
Sector-Specific Compliance

One Platform, Selected Frameworks

MCPOne offers configurable controls mapped to sector-relevant frameworks. Select and validate the controls appropriate for your deployment.

Federal Civilian

OMB · FedRAMP · NIST · FISMA
HHSGSADHSDOEOPM
Use Case
AI-powered FOIA processing & policy Q&A for agency staff
OMB M-24-10
Configurable federal AI governance controls
MAPPED
FedRAMP High
Provider-routing controls can be configured for authorized endpoints
MAPPED
NIST AI RMF
Controls mapped to GOVERN/MAP/MEASURE/MANAGE functions
MAPPED
Privacy Act
Configured PII controls run before provider routing
MAPPED
FISMA Controls
Configured audit events support review of AI interactions
MAPPED
Configurable audit evidence for enabled controls
Deterministic, test-covered structured identifier detection
Framework Mapping

Dynamic Compliance Framework Mapping

Configurable controls mapped to major frameworks; coverage varies by deployment and enabled controls.

FrameworkFederal CivilianDoD / ICHealthcareFinancialCommercial
FedRAMP High
NIST AI RMF
OMB M-24-10
CMMC
HIPAA/HITECH
PCI-DSS v4
SOC 2
GDPR/CCPA
ITAR/EAR
FISMA/DISA
Mapped control
Configurable mapping
Not mapped
Validate mappings for your deployment
Request Lifecycle

What Happens to Enabled Requests

01
Pre-Flight

Policy & Compliance Evaluation

Incoming prompt is evaluated against the app's enabled policy controls. Block, warn, or redact based on the configured rule outcome.

Configurable rulesCustom bundlesEnabled controls
02
PII Guard

PII Detection & Redaction

Deterministic, test-covered structured identifier detection supports configured redaction before provider routing.

Structured identifiersConfigured redactionReversible tokens
03
Safety

Multi-Category Safety Scoring

Built-in safety floors evaluate CBRN threats, self-harm, hate speech, violent speech, and sexual content. Hard blocks apply only for enabled enforced rails.

Built-in safety floorsEnabled enforced railsHard block mode
04
Routing

Intelligent Model Routing

Configured routing selects an available provider. PHI routing is blocked when an enabled BAA control does not cover the selected provider.

Compliance-awareCost optimizationLatency routing
05
Post-Flight

Response Verification & Audit

Enabled response controls are evaluated before egress. Usage events record configured audit metadata for review.

Response controlsAudit metadataCost tracking
One Endpoint Change

Integrate with Your Controls

MCPOne is OpenAI-API compatible. Point your existing SDK at MCPOne's endpoint — configured controls can be applied without changing your client API shape.

Supported OpenAI-compatible clients
Python, Node.js, Go, Java, .NET support is deployment-dependent
Per-tenant app and API-key controls
Local Ollama option
integration.py
# Before MCPOne — direct to OpenAI
- client = OpenAI(api_key="sk-...")
- client.base_url = "https://api.openai.com"

# After — one line change, configured controls
+ client.base_url = "https://mcpone.agency.gov"

# Enabled controls apply to this request:
response = client.chat.completions.create(
    model="gpt-4",
    messages=[{"role":"user", "content": prompt}]
)
# ^ PII redacted, policy checked, safety scored,
# audit metadata recorded when enabled
Configure Your Controls

AI With Configurable Controls

Configure and validate controls for your organization before shipping AI features.

No credit card required · Deployment options vary · Local Ollama option