A guarded MCP gateway for internal business systems that enforces role-based tool access, row/field-level data filtering, and per-call auditing.