--- title: Secure AI Agent Infrastructure with Zero-Code MCP description: Teleport's MCP integration provides protocol-level security for AI agent workflows without requiring changes to MCP servers or application code. It enforces... canonical: https://daily.dev/posts/secure-ai-agent-infrastructure-with-zero-code-mcp-u2vb6ctqd twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Secure AI Agent Infrastructure with Zero-Code MCP | daily.dev og:description: Teleport's MCP integration provides protocol-level security for AI agent workflows without requiring changes to MCP servers or application code. It enforces... og:url: https://daily.dev/posts/secure-ai-agent-infrastructure-with-zero-code-mcp-u2vb6ctqd og:image: https://api.daily.dev/og/posts/U2vb6CTqD.png og:image:alt: Secure AI Agent Infrastructure with Zero-Code MCP og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Secure AI Agent Infrastructure with Zero-Code MCP **[Teleport](https://daily.dev/sources/teleport)** · 24 min read · 0 upvotes · 0 comments ## Summary Teleport's MCP integration provides protocol-level security for AI agent workflows without requiring changes to MCP servers or application code. It enforces least-privilege access with a deny-by-default posture, supports just-in-time access requests for high-risk tools with human approval, and generates immutable, identity-attributed audit trails for every agent action. Access control operates at both server and tool level using label-based RBAC, glob patterns, and regex, while short-lived certificates replace static API tokens. The gateway sits transparently between MCP clients and servers, requiring only a client configuration change to route through 'tsh mcp connect'. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How can I enforce least-privilege access control for MCP servers without modifying their code? Teleport enforces access control at the protocol layer by acting as an authenticated gateway between MCP clients and servers, using a deny-by-default posture where newly registered servers expose no tools until explicitly allowed via RBAC. Permissions can be scoped at the server level (label-based) and tool level (literal strings, glob patterns, or regex), with deny rules evaluated before allow rules, all without touching MCP server code. _Developers weighing MCP authorization approaches can compare architectures like this one on daily.dev._ ### What transport modes does the Model Context Protocol support and when should each be used? MCP supports STDIO and SSE/Streamable HTTP transport modes. STDIO runs the server as a local child process with zero network overhead, ideal for personal dev environments and CLIs. SSE/Streamable HTTP runs the server as a remote HTTP service supporting multiple clients, OAuth and API key authentication, and scaling across distributed production infrastructure. _Teams designing MCP deployments can track transport tradeoffs like these on daily.dev._ ### How can just-in-time access work for destructive database operations invoked through an AI agent? A user requests elevated permissions via a command like tsh request create with a stated business reason, which routes to designated approvers who review the requester, resource, and justification before approving or denying. Once approved, the user receives temporary elevated permissions, typically lasting one to eight hours, which are automatically revoked when the window expires with no manual cleanup required. _Anyone designing JIT approval workflows for AI-driven database access can find similar patterns on daily.dev._ ## Similar posts on daily.dev - [5 requirements for using MCP servers to connect AI agents](https://daily.dev/posts/5-requirements-for-using-mcp-servers-to-connect-ai-agents-bcmxvxk3s) · InfoWorld · 1 upvotes · 0 comments - [What Is MCP and Why Does It Need a Gateway? A Practical Guide for AI Engineers](https://daily.dev/posts/what-is-mcp-and-why-does-it-need-a-gateway-a-practical-guide-for-ai-engineers-fhf76gbfk) · DEV · 5 upvotes · 0 comments - [Zero Trust Architecture for Decentralized MCP Tool Discovery](https://daily.dev/posts/zero-trust-architecture-for-decentralized-mcp-tool-discovery-rkfxd6fg9) · Security Boulevard · 1 upvotes · 0 comments - [Tool Provisioning in MCP Servers: Controlling AI Agent Access in Production](https://daily.dev/posts/tool-provisioning-in-mcp-servers-controlling-ai-agent-access-in-production-xs5mwgwop) · portkey · 0 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#mcp](https://daily.dev/tags/mcp), [#authorization](https://daily.dev/tags/authorization) [View this post on daily.dev](https://daily.dev/posts/secure-ai-agent-infrastructure-with-zero-code-mcp-u2vb6ctqd) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Secure AI Agent Infrastructure with Zero-Code MCP","url":"https://daily.dev/posts/secure-ai-agent-infrastructure-with-zero-code-mcp-u2vb6ctqd","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/secure-ai-agent-infrastructure-with-zero-code-mcp-u2vb6ctqd"},"datePublished":"2026-08-23T12:21:55.341Z","dateModified":"2026-08-23T12:43:30.895Z","description":"Teleport's MCP integration provides protocol-level security for AI agent workflows without requiring changes to MCP servers or application code. It enforces...","image":"https://media.daily.dev/image/upload/s--0_ODbtD2--/f_auto/v1722860399/public/Placeholder%2008","thumbnailUrl":"https://media.daily.dev/image/upload/s--0_ODbtD2--/f_auto/v1722860399/public/Placeholder%2008","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/secure-ai-agent-infrastructure-with-zero-code-mcp-u2vb6ctqd","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents,mcp,authorization","timeRequired":"PT24M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Secure AI Agent Infrastructure with Zero-Code MCP"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/secure-ai-agent-infrastructure-with-zero-code-mcp-u2vb6ctqd#faq","mainEntity":[{"@type":"Question","name":"How can I enforce least-privilege access control for MCP servers without modifying their code?","acceptedAnswer":{"@type":"Answer","text":"Teleport enforces access control at the protocol layer by acting as an authenticated gateway between MCP clients and servers, using a deny-by-default posture where newly registered servers expose no tools until explicitly allowed via RBAC. Permissions can be scoped at the server level (label-based) and tool level (literal strings, glob patterns, or regex), with deny rules evaluated before allow rules, all without touching MCP server code. Developers weighing MCP authorization approaches can compare architectures like this one on daily.dev."}},{"@type":"Question","name":"What transport modes does the Model Context Protocol support and when should each be used?","acceptedAnswer":{"@type":"Answer","text":"MCP supports STDIO and SSE/Streamable HTTP transport modes. STDIO runs the server as a local child process with zero network overhead, ideal for personal dev environments and CLIs. SSE/Streamable HTTP runs the server as a remote HTTP service supporting multiple clients, OAuth and API key authentication, and scaling across distributed production infrastructure. Teams designing MCP deployments can track transport tradeoffs like these on daily.dev."}},{"@type":"Question","name":"How can just-in-time access work for destructive database operations invoked through an AI agent?","acceptedAnswer":{"@type":"Answer","text":"A user requests elevated permissions via a command like tsh request create with a stated business reason, which routes to designated approvers who review the requester, resource, and justification before approving or denying. Once approved, the user receives temporary elevated permissions, typically lasting one to eight hours, which are automatically revoked when the window expires with no manual cleanup required. Anyone designing JIT approval workflows for AI-driven database access can find similar patterns on daily.dev."}}]} ```