🚀 Secure and Simplify Your MCP Server with ARC

What is ARC?

ARC (Acuvity Runtime Container) is a secure, streamlined Docker runtime designed specifically for hosting MCP servers. It provides isolated execution, built-in runtime protection via Minibridge, and simplified remote connectivity, making it ideal for deploying agentic systems in enterprise environments.

How to use ARC?

Add your MCP server to ARC by opening a GitHub issue with the source link and runtime configuration. Acuvity handles secure containerization, Minibridge integration, SBOM validation, and remote support. Deployment can be done via Docker or Kubernetes with Helm charts.

Key features of ARC

• Isolated, non‑root container execution with immutable runtime
• Version pinning and CVE scanning via Docker Scout
• SBOM and provenance for supply chain transparency
• Minibridge integration for integrity checks and threat detection
• Rego policy enforcement using Open Policy Agent (OPA)
• Built‑in remote connectivity (HTTP/SSE, WebSockets) and TLS support

Use cases of ARC

• Secure hosting of MCP servers for critical agentic workflows
• Runtime protection against prompt injection and tool‑shadowing attacks
• Policy‑compliant deployment with fine‑grained governance
• Effortless remote access without custom protocols
• Enterprise‑ready MCP ecosystem with version‑pinned, tamper‑proof containers

FAQ from ARC

What is Minibridge?

Minibridge is a security layer that integrates with ARC to secure agent‑to‑MCP interactions. It performs integrity checks, blocks hidden‑prompt phrases, detects tool‑shadowing, and redacts credentials in outbound content.

How does ARC ensure secure deployment?

ARC enforces least‑privilege with non‑root users, uses a read‑only filesystem, pins container versions, and automatically validates SBOMs to prevent compromised deployments.

What transport protocols does ARC support?

Minibridge handles HTTP/SSE, WebSockets, and other protocols natively, providing built‑in remote connectivity without custom configuration.

How can I add my MCP server to ARC?

You contribute by opening a GitHub issue using the provided template, including your app’s source link and runtime environment variables or CLI arguments. Acuvity then handles secure containerization and integration.

Does ARC require the Acuvity Platform?

No, ARC works independently. Some advanced features like full policy management, authorization controls, and deep multimodal analysis are available only with the Acuvity Platform.