Skip to content

Immens MCP Fortress - Security

Access Points

Create access points with granular permissions:

  • Read-only: read only (posts, media, comments)
  • Full: read + write
  • Custom: select individual allowed tools

IP Whitelist

Restrict access to specific IPs or subnets in CIDR notation:

192.168.1.0/24
10.0.0.1
203.0.113.0/24

Rate Limiting

Each access point has a configurable limit of requests per minute (default: 60).

Authentication

  • Bearer Token: API key in imf_ + 64 hex chars format in the Authorization header
  • URL Parameter: API key as URL parameter ?api_key=...
  • OAuth 2.1 PKCE: for third-party applications

Audit Log

All MCP operations are logged with: - Tool used - Call arguments - Origin IP - Status (success/error) - Timestamp


Back to overview | Installation | Configuration | API