MCP Server Mesh
MCP servers
10
Replicas
25
Tool calls/min
820
Denied (24h)
12
| Server | Replicas | Owner | Status | Error budget left |
|---|---|---|---|---|
| erp-mcp | 3 | K. Brady | Healthy | 82% |
| itsm-mcp | 2 | A. Chen | Healthy | 64% |
| wms-mcp | 2 | J. Park | Healthy | 71% |
| vault-mcp | 3 | L. Novak | Healthy | 95% |
| edge-mcp | 4 | H. Patel | Degraded | 38% |
| id-mcp | 2 | M. Okonkwo | Failing over | 29% |
| fin-mcp | 2 | B. Costa | Healthy | 77% |
| legal-mcp | 2 | P. Iyer | Healthy | 58% |
| crm-mcp | 2 | N. Rahman | Healthy | 80% |
| obs-mcp | 3 | T. Berg | Healthy | 90% |
Registered Tools
| Tool | Server | Scope | Status | Owner |
|---|---|---|---|---|
| search_orders | erp-mcp | read | Enabled | K. Brady |
| create_ticket | itsm-mcp | write | Enabled | A. Chen |
| get_shipment | wms-mcp | read | Enabled | J. Park |
| reserve_slot | wms-mcp | write | Enabled | J. Park |
| rotate_secret | vault-mcp | admin | Approval required | L. Novak |
| deny_egress | edge-mcp | admin | Approval required | H. Patel |
| bind_spiffe | id-mcp | admin | Disabled | M. Okonkwo |
| post_journal | fin-mcp | write | Approval required | B. Costa |
| close_period | fin-mcp | admin | Approval required | B. Costa |
| read_contract | legal-mcp | read | Enabled | P. Iyer |
| query_crm | crm-mcp | read | Enabled | N. Rahman |
| scan_payload | obs-mcp | read | Enabled | T. Berg |
Agent Clients
Private mesh — no public tool endpoints.
| Agent | Client | Role | Status | Mesh owner |
|---|---|---|---|---|
| planner-01 | Nexus Financial | Operator | Active | K. Brady |
| ticket-bot | Pinnacle MSP | Reviewer | Active | A. Chen |
| wms-scout | Metro Logistics | Analyst | Active | J. Park |
| ledger-guard | Harbor Bank | Lead | Active | B. Costa |
| legal-rag | Clearroom SaaS | Reviewer | Active | P. Iyer |
| crm-brief | Atlas Retail | Analyst | Active | N. Rahman |
| vault-rotator | Kiln Platform | Owner | Active | L. Novak |
| edge-deny | Wattage Cloud | Lead | Throttled | H. Patel |
| spiffe-bind | Kiln Platform | Owner | Suspended | M. Okonkwo |
| payload-scan | Aperture Labs | Reviewer | Active | T. Berg |
mTLS & Tokens
SPIFFEVaultRotating creds
| Identity | Server | TTL | Status | Owner |
|---|---|---|---|---|
| spiffe://mesh/erp | erp-mcp | 4h | Valid | K. Brady |
| spiffe://mesh/itsm | itsm-mcp | 4h | Valid | A. Chen |
| spiffe://mesh/wms | wms-mcp | 2h | Valid | J. Park |
| spiffe://mesh/vault | vault-mcp | 1h | Rotating | L. Novak |
| spiffe://mesh/edge | edge-mcp | 4h | Valid | H. Patel |
| spiffe://mesh/id | id-mcp | 2h | Revoked | M. Okonkwo |
| spiffe://mesh/fin | fin-mcp | 4h | Valid | B. Costa |
| spiffe://mesh/legal | legal-mcp | 8h | Valid | P. Iyer |
| spiffe://mesh/crm | crm-mcp | 4h | Valid | N. Rahman |
| spiffe://mesh/obs | obs-mcp | 2h | Valid | T. Berg |
Tool Audit Log
| Event | Agent | Decision | Review | Owner |
|---|---|---|---|---|
| erp.write without approval token | planner-01 | Deny | Reviewed | K. Brady |
| legal corpus retrieval | legal-rag | Allow | Auto-cleared | P. Iyer |
| vault.rotate_secret | vault-rotator | Allow | Reviewed | L. Novak |
| public egress attempt | planner-01 | Deny | Needs review | H. Patel |
| wms.reserve_slot | wms-scout | Allow | Auto-cleared | J. Park |
| itsm.create_ticket | ticket-bot | Allow | Auto-cleared | A. Chen |
| edge.deny_egress | edge-deny | Allow | Reviewed | H. Patel |
| id.bind_spiffe, identity revoked | spiffe-bind | Deny | Needs review | M. Okonkwo |
| fin.close_period without approval | ledger-guard | Deny | Needs review | B. Costa |
| obs.scan_payload | payload-scan | Allow | Auto-cleared | T. Berg |
- Denied erp.write without approval token
- RAG retrieval scoped to legal corpus
- Rotated vault-mcp SPIFFE id
- Blocked public egress from planner-01
- Denied id.bind_spiffe: identity revoked
Mesh Latency
p50
22ms
p99
89ms
Errors
0.1%
Calls/min
820
| Server | p50 | p99 | Budget (100ms p99) | Owner |
|---|---|---|---|---|
| erp-mcp | 18ms | 72ms | Within | K. Brady |
| itsm-mcp | 24ms | 91ms | Within | A. Chen |
| wms-mcp | 21ms | 84ms | Within | J. Park |
| vault-mcp | 12ms | 41ms | Within | L. Novak |
| edge-mcp | 38ms | 140ms | Over | H. Patel |
| id-mcp | 29ms | 118ms | Over | M. Okonkwo |
| fin-mcp | 20ms | 77ms | Within | B. Costa |
| legal-mcp | 33ms | 96ms | Near limit | P. Iyer |
| crm-mcp | 19ms | 69ms | Within | N. Rahman |
| obs-mcp | 15ms | 55ms | Within | T. Berg |
Server Deployments
| Server | Version | Replicas | Rollout | Owner |
|---|---|---|---|---|
| erp-mcp | v2.4 | 3 | Live | K. Brady |
| itsm-mcp | v1.9 | 2 | Canary 10% | A. Chen |
| wms-mcp | v3.1 | 2 | Live | J. Park |
| vault-mcp | v1.6 | 3 | Live | L. Novak |
| edge-mcp | v0.9 | 4 | Rolling back | H. Patel |
| id-mcp | v1.2 | 2 | Failing over | M. Okonkwo |
| fin-mcp | v2.0 | 2 | Live | B. Costa |
| legal-mcp | v1.4 | 2 | Live | P. Iyer |
| crm-mcp | v1.8 | 2 | Live | N. Rahman |
| obs-mcp | v2.2 | 3 | Live | T. Berg |
erp-mcp
v2.4 · 3 replicas
itsm-mcp
v1.9 · 2 replicas
Mesh config
Air-gapped VPC · default deny outbound
| Setting | Value | Owner | Status | Updated |
|---|---|---|---|---|
| Outbound default | Deny | H. Patel | Live | 2026-10-05 |
| SPIFFE TTL | 4h default | L. Novak | Live | 2026-10-04 |
| Canary share | 10% | A. Chen | Live | 2026-10-14 |
| Vault path | kv/mcp/* | L. Novak | Live | 2026-10-03 |
| Audit retention | 90 days | T. Berg | Live | 2026-10-01 |
| p99 budget | 100ms | T. Berg | Live | 2026-10-07 |
| Deny-list sync | Hourly | H. Patel | Live | 2026-10-09 |
| Tool allowlist | Signed manifests | M. Okonkwo | Live | 2026-10-02 |
| mTLS minimum version | 1.3 | M. Okonkwo | Live | 2026-10-02 |
| Rate limit | 1200 / min per agent | T. Berg | Live | 2026-10-16 |