# IdentArk Gateway

An MCP gateway for agent calls with risk checks, audit records, and human approval. Use it when agents should not hold secrets directly.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 16
- Author: identArk
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/identArk/identark
- Updated: 2026-09-29
- HTML: https://affpapa.org/en/nevibecode/mcp/identark-gateway

## What it does

IdentArk Gateway inserts a control layer between an AI agent and external actions. Calls receive a risk assessment, an audit trail is kept, and a person can approve the operation. This fits workflows where an agent may reach APIs, files, or code but must not get unrestricted access to credentials.

The server connects through the MCP endpoint `https://api.identark.io/v1/mcp/rpc` and has setup commands for Claude Code, Codex, Cursor, GitHub Copilot, and Gemini CLI. The IdentArk SDK also separates local and production execution: `DirectGateway` uses a client key locally, while `ControlPlaneGateway` keeps secrets out of the agent. Human approval adds a review step before risky calls proceed.

## Requirements
- Remote server: `https://api.identark.io/v1/mcp/rpc`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http identark-gateway https://api.identark.io/v1/mcp/rpc
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add identark-gateway --url https://api.identark.io/v1/mcp/rpc
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "identark-gateway": {
            "url": "https://api.identark.io/v1/mcp/rpc"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "identark-gateway": {
            "type": "http",
            "url": "https://api.identark.io/v1/mcp/rpc"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http identark-gateway https://api.identark.io/v1/mcp/rpc
```

## When to use it
- route agent calls through risk checks
- record an audit trail for external calls
- ask a person to approve sensitive actions
- keep API keys outside the agent process

## Example prompts
- Connect `IdentArk Gateway` and route the next agent action through its risk check.
- Show the agent call history and ask for human approval before running the action.
- Check which credentials remain outside the agent process when using `IdentArk Gateway`.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33918
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81115
- [Front-End Checklist](https://affpapa.org/en/nevibecode/mcp/front-end-checklist.md) — MCP server · ★ 74559
- [Scrapling MCP Server](https://affpapa.org/en/nevibecode/mcp/scrapling-mcp-server.md) — MCP server · ★ 89433

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md