Security
Your MCP, your data, your infrastructure.
Skyline is built for environments where shipping credentials to a managed cloud isn't an option. Air-gap deployable, encrypted at rest, audit-ready by default.
Four principles, one architecture
Credentials never leave your network
Every API credential is encrypted at rest using AES-256-GCM, decrypted only inside the gateway process at request time, and re-encrypted before the request body ever leaves the process boundary. There is no managed-cloud intermediary, no third-party token store, no callback to an SSO that you don't control.
Audit log is append-only and yours
Every tool call writes to an audit log in your own database (PostgreSQL or ClickHouse). The log is append-only by design; rows include the calling profile, the upstream API, the operation, the duration, the response size, and the error class — never the credential, never the body unless you turn body capture on explicitly.
Air-gap deployable
Skyline ships as a single Go binary plus container image. No phone-home, no required outbound to anthropic.com or openai.com, no required telemetry. Install on an internal VM cluster, point your agents at it, and the only network traffic leaving your perimeter is the traffic you explicitly configured upstream.
Process isolation by design
Each profile (the per-team or per-environment configuration of which APIs an agent can reach) runs with its own credential set and its own audit scope. A compromised agent on one profile cannot read the credentials or audit log of another profile from the same Skyline instance.
Compliance posture
Skyline doesn't hand you a certification — it gives you an architecture that can earn one. Here's what the deployment shape supports today.
| HIPAA | Architecture supports HIPAA-bound deployments. BAA available on Enterprise tier. |
| SOC 2 | Skyline self-hosted satisfies the technical control surface (encryption at rest, audit logging, access control). SOC 2 attestation for the managed-cloud option (cloud.xskyline.com) in progress. |
| PCI-DSS | Designed to be deployable inside cardholder-data environments. Credentials never transit external networks; audit retention configurable to meet 1-year minimum. |
| FedRAMP | Container image is FIPS-140-2 buildable. Air-gap deployment satisfies the "no external connectivity" baseline. FedRAMP-ready guidance available on Enterprise tier. |
| ISO 27001 | Architecture aligns with ISO 27001 Annex A controls. Documentation pack for auditors available on request. |
Reporting a vulnerability
If you believe you've found a security issue in Skyline, please email security@xskyline.com with a description, reproduction steps, and the affected version. We acknowledge within 48 hours and publish fixes on a coordinated timeline. We do not run a public bug-bounty program at this stage; we credit reporters in release notes unless asked to keep the disclosure private.
For commercial support contracts and security-review coordination, talk to sales.
Security people review architectures, not marketing.
Read the code, read the docs, run a pen-test against a dev install. We're available when you have questions.