Golf is an open-source, production-ready MCP server framework and security layer for MCP providers. It lets developers define an MCP's capabilities — tools, prompts, and resources — as simple Python files which Golf discovers, compiles, and runs as a secure MCP server powering AI agents. Golf adds a firewall/security layer to detect and mitigate prompt-injection, PII leakage, and other agent-safety issues while providing built-in Auth, Observability, Debugger, Telemetry and Runtime components for production deployments. The project includes testing tooling to validate performance, security and compliance of MCPs and collects anonymous CLI usage data to improve the framework over time.