Secretless access
Upstream provider credentials live server-side. Agents authenticate with their BR API key only — they never see a provider secret.
Model Context Protocol gateway. Governed access to routing, memory, budget, security, and admin tools — over a single SSE connection with RBAC and a full audit trail.
Upstream provider credentials live server-side. Agents authenticate with their BR API key only — they never see a provider secret.
Register external MCP servers through BR. Every proxied tool call passes through your governance layer: RBAC, audit, rate limits.
Each tool requires a permission scope. Agents only see tools their role allows; admin tools are invisible to agent roles.
Works with Claude Desktop, Cursor, Windsurf, and any MCP-compatible client.
.cursor/mcp.json
{
"mcpServers": {
"brainstormrouter": {
"url": "https://api.brainstormrouter.com/v1/mcp/sse",
"headers": {
"Authorization": "Bearer brk_live_..."
}
}
}
}
An API key, a config file, 107 governed tools. Under a minute.