# s-gw

s-gw keeps raw credentials away from coding agents and releases them to local processes only after approval. Use it when agent access needs clear boundaries.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 15
- Author: sgateway
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/sgateway/s-gw
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/s-gw

## What it does

s-gw gives an agent named handles instead of exposing keys, passwords, tokens, or SSH material. The agent submits an action request, and the local operator reviews its scope, command, environment binding, working directory, and target. Once approved, the gateway passes the credential to a child process on the same machine and returns scrubbed output.

The package includes an MCP server for handle discovery and request creation, a CLI for setup and policies, a local console, and audit records. The npm route requires Node.js 20 or newer; Linux setup also uses `secret-tool`. This project is an early preview, and its Windows and Linux desktop support is experimental. It has not had an independent security audit, so it is not a replacement for endpoint security.

## Requirements
- Needs: Node.js (commands run via npx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add s-gw -- npx -y @s-gw/s-gw
```

### Codex

**Platform CLI**
```bash
codex mcp add s-gw -- npx -y @s-gw/s-gw
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "s-gw": {
            "command": "npx",
            "args": [
                "-y",
                "@s-gw/s-gw"
            ]
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "s-gw": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@s-gw/s-gw"
            ]
        }
    }
}
```

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add s-gw npx -y @s-gw/s-gw
```

## When to use it
- keep API keys out of agent context
- require approval before a command runs
- bind access to a directory and target
- remove credential values from command output
- track requests and executions in audit records

## Example prompts
- Connect s-gw and ask it for a handle that reads from the project credential store.
- Ask s-gw to run a command with a selected handle after I approve the request.
- Show the s-gw history for recent requests and approvals.

## Similar
- [1password](https://affpapa.org/en/nevibecode/mcp/1password.md) — MCP server · ★ 22
- [n8n-credentials-and-security-official](https://affpapa.org/en/nevibecode/skills/n8n-credentials-and-security-official.md) — skill · 2000 installs
- [credentials](https://affpapa.org/en/nevibecode/skills/credentials.md) — skill · 1400 installs
- [vouch-mcp](https://affpapa.org/en/nevibecode/mcp/vouch-mcp.md) — MCP server · ★ 28
- [TAP](https://affpapa.org/en/nevibecode/mcp/tap.md) — MCP server · ★ 13
- [ghost-scan-secrets](https://affpapa.org/en/nevibecode/skills/ghost-scan-secrets.md) — skill · 4400 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md