Agent Provost: Secure MCP Proxy for Alpaca
Floating Cloud · Cybersecurity & IT
Certification per AWS Marketplace.
Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
Connecting AI agents (like Claude or ChatGPT) to live trading APIs introduces massive security and compliance risks. Agent Provost solves this by acting as a secure, zero-trust Model Context Protocol (MCP) proxy specifically designed for the Alpaca trading API. It sits directly between your AI and your brokerage account, ensuring that LLMs can only execute trades within strict, pre-defined boundaries.
Built for fintech developers and algorithmic traders, Agent Provost features a hot-reloadable Rules Engine that enforces maximum trade notionals, share limits, and explicit symbol allowlists or blocklists. It includes robust rate limiting to prevent runaway AI loops and API bans.
Show the rest of the publisher’s description (3 more lines)
Security is baked into the architecture. The appliance is 100% stateless, pulling ephemeral credentials into a secure RAM disk on every boot. For compliance and auditing, all AI trading requests and system actions are immutably logged to an AWS S3 bucket with Object Lock (WORM) enabled, ensuring a tamper-proof audit trail of every AI decision.
Enterprise Pricing & Private Offers:
The public pricing reflects our standard on-demand rate. However, we strongly encourage enterprise customers to contact us for a Private Offer. Customers willing to commit to a multi-year agreement or participate in a logo-sharing case study are eligible for up to a 50% discount on annual licenses. Please contact support@floatingcloud.io to negotiate a Private Offer before deploying.
Highlights
Highlighted by the publisher on AWS Marketplace.
Customizable Trading Rules Engine: Enforce strict guardrails on AI agents with hot-reloadable policies. Set maximum trade notionals, share limits, and explicit symbol allowlists or blocklists to prevent rogue AI trading behavior.
Zero-Trust Ephemeral Architecture: Designed for maximum security, the appliance is 100% stateless. API keys are never written to disk; they are fetched dynamically from AWS Secrets Manager into a secure RAM disk on every boot.
Immutable WORM Audit Logging: Achieve enterprise-grade compliance with automatic, tamper-proof logging. Every AI request, proxy action, and system event is streamed directly to an Object Lock-enabled Amazon S3 bucket.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Plans and pricing as listed
12 listed- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
Refund terms
As stated by the publisher on AWS Marketplace.
All sales are final. We do not offer refunds or prorated refunds for any hourly or annual subscriptions. The Software is provided "AS IS" and Licensee assumes all risks associated with its use. You may cancel your subscription at any time to prevent future billing, but no refunds will be issued for past usage or prepaid annual terms.
Sources
Publisher resources
2 linksLinked repositories
1 repoUnknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.