ThinkWatch

Enterprise AI bastion host for secure AI API and MCP access, with unified proxying, RBAC, audit logs, rate limiting, and cost tracking across OpenAI, Anthropic, Gemini, and self-hosted LLMs.

#ai#ai-gateway#ai-security#ai-tools#mcp#mcp-gateway#mcp-security#mcp-server#security

Install

cargo install --git https://github.com/ThinkWatchProject/ThinkWatch.git

Claude Desktop config

Add this to your claude_desktop_config.json:

{
  "mcpServers": {
    "thinkwatch": {
      "command": "npx",
      "args": [
        "-y",
        "github:ThinkWatchProject/ThinkWatch"
      ]
    }
  }
}

From the README

**[English](README.md) | [中文](README.zh-CN.md)** **The enterprise-grade secure gateway for AI.** Secure, audit, and govern every AI API call and MCP tool invocation across your organization — from a single control plane. Just as an SSH secure gateway is the single gateway through which all server access must flow, ThinkWatch is the single gateway through which all AI access must flow. Every model request. Every tool call. Every token. Authenticated, authorized, rate-limited, logged, and accounted for. As AI agents proliferate across engineering teams, organizations face a growing governance…

Read full README on GitHub →