ThinkWatch

Overview

ThinkWatch is an enterprise-grade security gateway for AI APIs and MCP (Model Context Protocol) access. It provides a unified control plane that authenticates, authorizes, rate-limits, logs, and accounts for every AI API call and MCP tool invocation across an organization. The solution supports multiple LLM providers including OpenAI, Anthropic, Google Gemini, Azure OpenAI, and AWS Bedrock, with automatic format conversion between different APIs. Its MCP gateway maintains end-user identity when connecting to upstream services, unlike typical proxies that use shared service accounts.

Try asking AI

After installing, here are 7 things you can ask your AI assistant:

• github__create_issue

  Create a new GitHub issue with title, body, and labels

  Try:Create a new GitHub issue titled 'Feature request: dark mode' with a description about user interface improvementsTry:File a bug report in GitHub about login failures on mobile devices
• notion__create_page

  Create a new page in Notion with title and content

  Try:Create a new meeting notes page in Notion with today's date and participants listTry:Add a new project requirement document to Notion with specifications
• linear__create_ticket

  Create a new Linear ticket with title, description, and priority

  Try:Create a Linear ticket for implementing user authentication flowTry:File a high-priority bug report about payment processing failure
• slack__send_message

  Send a message to a Slack channel or direct message

  Try:Send a notification to the #engineering Slack channel about deployment completionTry:Direct message a colleague about code review request
• atlassian__create_issue

  Create a new Jira issue with summary, description, and priority

  Try:Create a Jira ticket for the new API endpoint feature requestTry:File a bug report in Jira about database connection timeouts
• cloudflare__list_zones

  List Cloudflare DNS zones and their configurations

  Try:Show all my Cloudflare domains and their SSL settingsTry:List all DNS zones managed in Cloudflare
• gitlab__create_merge_request

  Create a new GitLab merge request with title and description

  Try:Create a merge request for the authentication feature branchTry:Submit a new MR to fix the payment processing bug
• discord__send_message

  Send a message to a Discord channel or direct message

  Try:Post an announcement in the #general Discord channel about server maintenanceTry:Send a direct message to a team member about meeting rescheduling
• google__search

  Perform a Google search and return results

  Try:Search for the latest AI model benchmarks and comparisonsTry:Find documentation on GraphQL API best practices
• postgres__query

  Execute SQL queries against a PostgreSQL database

  Try:Query the top 10 customers by revenue from the sales databaseTry:Show all active users who signed up in the last 7 days
• redis__get

  Retrieve a value from Redis by key

  Try:Get the cached session data for user ID 12345Try:Retrieve the latest API rate limit status from Redis
• docker__list_containers

  List Docker containers and their status

  Try:Show all running Docker containers and their resource usageTry:List all stopped containers that need to be cleaned up

Note: Tool names inferred from the MCP Gateway section which lists platforms (GitHub, Notion, Linear, etc.) that MCP tools would connect to. The actual tool names are explicitly mentioned in the format 'platform__action' (e.g., 'github__create_is

Comparable tools

Installation

git clone https://github.com/ThinkWatchProject/ThinkWatch.git
cd ThinkWatch

docker compose up -d

{
  "mcpServers": {
    "thinkwatch": {
      "command": "npx",
      "args": ["@thinkwatch/mcp-server", "--server", "http://localhost:3000"]
    }
  }
}

FAQ

What LLM providers does ThinkWatch support?

ThinkWatch supports OpenAI, Anthropic, Google Gemini, Azure OpenAI, AWS Bedrock, and any OpenAI-compatible endpoints. It automatically converts between different API formats.

How does ThinkWatch handle MCP authentication differently from other proxies?

Unlike typical MCP proxies that use a shared service account token, ThinkWatch maintains per-user OAuth tokens or PATs (Personal Access Tokens) for each upstream service, providing true end-to-end user identity in audit logs.

Can I use ThinkWatch with existing AI development tools like Cursor or Claude Code?

Yes, ThinkWorks works as a drop-in replacement for Cursor, Continue, Cline, Claude Code, and OpenAI/Anthropic SDKs by providing a unified proxy interface at a single port.

Compare ThinkWatch with