Doberman: an MCP proxy that gives every tools/call an allow/authenticate/block verdict before it reaches the downstream server