Civic Labs

Where Civic explores ideas in digital identity, agentic AI, and authorization

Here you’ll find a suite of experiments and tools, some just getting started, some ready to test, all open to feedback and community input.

Each project is presented as a flask, representing different stages of experimental development. Learn more about flask status →.

Flasks are standalone services, libraries or tools, that can be used independently or together to build more complex applications.

Explore the flasks below or get in touch if you want to contribute, try things early, or shape what comes next.

🚀 Getting Started

Want to try out these experiments? Get started here.

💬 Feedback & Contribution

We’re building in the open and love community input. Learn how to contribute.

🧪 Flasks

Our current experiments focus on Model Context Protocol (MCP) tools and AI security. These tools help developers build safer, more controlled AI applications with proper identity and authorization.

MCP Hub

A hosted MCP Manager unifying and orchstrating multiple MCP servers, focusing on auth and security

Guardrail Proxy

Wrap any MCP server in a configurable and flexible security layer

Bodyguard

LLM-based threat detection for prompts and tool calls

Pass-through Proxy

Middleware hook system for MCP servers that powers guardrails and more

Civic Knowledge

AI assistant for the optimisation of internal operations and processes

📚 Concepts & Architecture

Understanding the building blocks behind our experiments.

Model Context Protocol

What is MCP and why it matters for AI applications

Guardrails

Guardrails as a protection layer

Prompt Injection

Understanding prompt injection attacks & LLM safety

Auth Strategies

OAuth2, granular permissions, and consent

Hooks

A middleware layer around MCP APIs

RAG

Retrieval strategies for LLMs