node9 — Claude Code MCP server: access control
node9 checks an agent’s tool calls and can allow, block, or pause them for approval. Use it to put access rules between an agent and sensitive files or commands.
claude mcp add node9 -- npx -y node9-aiWhat node9 does
node9 sits between an agent and the tools it invokes. It can block reads from sensitive locations such as ~/.ssh, ~/.aws, and .env files, and hold destructive actions until you approve them. Shell commands are parsed by structure, so putting a file read inside a pipeline does not hide what the command does. A held action waits without running.
Connect node9 to Claude Code over stdio. From the conversation, an agent can ask for its status, protection posture, audit record, or policy. Node.js 22+ is required; without it, npx cannot launch node9. A shared dashboard account is optional, and local protection works without one.
What it helps with
- block an agent from reading SSH keys and
.envfiles - pause file deletion until a person approves it
- inspect shell pipelines for reads of protected credentials
- check node9 status and audit records from an agent conversation
Example prompts for the agent
- Check which node9 rule stopped the last tool call and explain the decision.
- Show the current node9 status and this machine’s protection posture.
- Review the node9 policy before I run a command that deletes files.
How to install node9
Platform CLI
claude mcp add node9 -- npx -y node9-aiPlatform CLI
codex mcp add node9 -- npx -y node9-aiConfig file
{
"mcpServers": {
"node9": {
"command": "npx",
"args": [
"-y",
"node9-ai"
]
}
}
}Config file
{
"servers": {
"node9": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"node9-ai"
]
}
}
}Platform CLI
gemini mcp add node9 npx -y node9-aiStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about node9
How do I install node9 in Claude Code?
Run claude mcp add node9 -- npx -y node9-ai. Node.js 22+ is required.
What does node9 do?
It checks an agent’s tool calls against access rules. A call can proceed, be blocked, or wait for approval.
Does node9 need an account for local protection?
No. Local protection works without an account; node9 login connects the machine to a shared dashboard without changing local enforcement.
