Co-Founder & CTO @zuplo. Passionate about developer experiences. Formerly @Salesforce, @Auth0 & @Azure. Weekend #woodworker.
Charlotte, NC
Joined May 2007
- Tweets177
- Following602
- Followers3.6K
- Likes166
Agent access needs answers to three questions: what can it call, where do credentials live, and can you trace what happened?
Blockdaemon's DeFi MCP Server uses Zuplo MCP Gateway to enforce those controls.
blockdaemon.com/blog/how-blo…
Tool discovery and tool permissions are separate jobs.
Blockdaemon's DeFi MCP Server lets agents search 180+ tools. Zuplo MCP Gateway curates what's exposed and logs each call.
blockdaemon.com/blog/how-blo…
Nathan Totten retweeted
Congratulations to our customer @BlockdaemonHQ on the launch of their DeFi MCP Server 👏
blockdaemon.com/blog/how-blo…
Proud to be the gateway accelerating and securing their MCP Journey. Learn more for yourself here youtube.com/watch?v=CKKLiQRS….
AI cost control belongs in the gateway, not the invoice. Enforce budgets per app and team in real time — fallback to cheaper models or 429 at the cap. zuplo.com/blog/attribute-ai-…
LLM spend is repeating cloud spend's history: adopt fast, get the bill, bolt on attribution later, regret it. The difference this time — you can put attribution in the request path from day one.
Every prompt your apps send to an LLM is data leaving the building — PII, credentials, customer records — usually with no checkpoint in between. The Zuplo AI Gateway now scans every request with DLP (80+ rules) before it leaves. zuplo.com/blog/attribute-ai-…
One mcp.json: a GitHub PAT, a Stripe key, a Notion secret. All plaintext, all broad-scope, all invisible to your security team.
That's shadow MCP. Govern it with an MCP gateway, don't ban it:
zuplo.link/vwEvGpl
ALT Your Team Already Installed Shadow MCP
Nathan Totten retweeted
docs: trakyo.link/api-docs
zudoku's genuinely good — built by the @zuplo team. if you're paying enterprise docs prices as a startup, go look at it first
AI spend trackers tell you where the money went. That's accounting, not control. The gateway sits in the request path — it can cap a team, cut off a low-value app, and keep budget flowing to the work that matters. Don't just track the bill. Control it.
Three independent regulatory efforts (NIST, CISA+allies, ISO 42001) landed on the same four AI agent requirements: own identity, least privilege, kill switch, audit trail.
All four live at the API gateway: zuplo.link/VbTnMkt
ALT What Regulators Now Expect From AI Agents
You vet an MCP server's tools once. A week later the operator rewrites the descriptions and they land in your agent's context silently. The attack fires during listing, not execution.
zuplo.link/4xNgiMx
ALT A Remote MCP Server Can Rug Pull You
You'd never ship an API without rate limits. But most teams ship LLM features with no spend limits — the budget is whatever the credit card allows. Rate limits protect your infra. Spend limits protect your P&L.
We shipped AI spend attribution in the Zuplo AI Gateway — cost rolls up app → team → gateway, with limits and warnings at every level. No more mystery invoices. zuplo.com/blog/attribute-ai-…
Nathan Totten retweeted
check it out: trakyo.link/api-docs
api's in beta — if you're already on trakyo, reach out and we'll grant you access
s/o @zuplo, zudoku is great
Nathan Totten retweeted
Launching the MCP Gateway. Public beta, open today.
One gateway in front of every MCP server your agents touch, yours and third-party.
✅ Full OAuth 2.0, spec-compliant
✅ Expose only the tools you pick
✅ Analytics on every call
Get started for free: zuplo.link/oEi6zWc
Nathan Totten retweeted
Marc knows it. Your API is your UI. How good is yours?
Let @zuplo get you to a great API quickly.
Welcome Salesforce Headless 360: No Browser Required! Our API is the UI. Entire Salesforce & Agentforce & Slack platforms are now exposed as APIs, MCP, & CLI. All AI agents can access data, workflows, and tasks directly in Slack, Voice, or anywhere else with Salesforce Headless 360. Faster builds, agentic everything. 🚀
#Salesforce #Agentforce #AI
venturebeat.com/ai/salesforc…
Our @Zoom account is locked out due to an issue on their side with SSO. The AI chat tells me to reset my password (which can't be done with SSO). The AI phone support sends me to the AI chat. Email support says I am not eligible for support.
The sales team offered to contact me in a few days to sell me a premium support plan - but nobody actually reached out (likely because we are small). It seem the only remedy is to send a legal notice for breach of contract which I have done today.