# agentgate

Audits MCP tools run by agents, collects scanner evidence, and validates setups against safety policies in CI or runtime environments.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 91
- Author: ciceroyang
- License: AGPL-3.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/ciceroyang/agentgate
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/agentgate

## What it does

The server keeps an exact inventory of tools executed by coding agents. It inspects local configuration files like `.codex/config.toml` while stripping credentials, headers, and tokens from addresses. Four separate modules handle package discovery, record compilation, policy verification, and external claim matching.

Its core logic treats unchecked items strictly. The system issues a `clean` verdict solely if every scanner finishes. Any failed or unmeasured step marks the build as `incomplete`. This design stops broken security steps from producing fake passing results.

Running the tool locally requires Node.js 20 or newer without extra dependencies. Do not use release 0.5.0: that build permitted missing evidence to pass gates silently. Version 0.6.0 fixes this behavior.

## Requirements
- Needs: Node.js (commands run via npx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add agentgate -- npx -y @zhiliangtech/agentgate
```

### Codex

**Platform CLI**
```bash
codex mcp add agentgate -- npx -y @zhiliangtech/agentgate
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "agentgate": {
            "command": "npx",
            "args": [
                "-y",
                "@zhiliangtech/agentgate"
            ]
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "agentgate": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@zhiliangtech/agentgate"
            ]
        }
    }
}
```

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add agentgate npx -y @zhiliangtech/agentgate
```

## When to use it
- inventory configured agent tools without exposing environment variables or auth tokens
- block unverified or disallowed tools during continuous integration checks
- generate standalone HTML reports showing scanner coverage and missing audits
- catch crashed or incomplete security scans before deploying agent configurations

## Example prompts
- Inspect local MCP configurations using `agentgate discover` to extract installed tools
- Run policy checks in the repo using `npx --yes --ignore-scripts @zhiliangtech/agentgate@0.6.0 check --root .`
- Build a tool inventory report from `tools.json` into a standalone HTML file

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

## Other versions with the same name
- [AgentGate · agentkitai](https://affpapa.org/en/nevibecode/mcp/agentkitai-agentgate.md) — ★ 33

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md