ScopeGate — Claude Code MCP server: features and setup
ScopeGate gives AI agents MCP access to selected actions in connected services and records their calls. Use it to keep an agent’s access to an account narrow.
Open on GitHubWhat ScopeGate does
ScopeGate sits between an AI agent and connected services. Each MCP endpoint exposes only the actions you select: an agent could read email without being allowed to send it. The service registry covers 27 providers, including Google Workspace, Slack, Notion, and Stripe.
Calls are recorded with the tool, outcome, and duration, and project logs can be exported. You can revoke an endpoint key while keeping its service connection active. Tokens are encrypted at rest; agents receive a ScopeGate key instead.
For a self-hosted setup, run docker compose --profile local up. To connect real services, copy .env.example to .env and add the OAuth client ID and secret for each provider you want to use. A provider without those credentials won’t appear in the app.
What it helps with
- allow an agent to read email but not send it
- create a separate MCP endpoint for a project
- review an agent’s request log
- revoke an endpoint key while retaining the service connection
Example prompts for the agent
- Read my email through the connected Gmail service.
- Find calendar events using the connected service.
- List the Google Drive files this endpoint can access.
How to install ScopeGate
1Template address
The server address is a template: replace {…} or […] with your own values
2Platform CLI: remote server
claude mcp add --transport http scopegate https://scopegate.dev/api/mcp/{api_key}1Template address
The server address is a template: replace {…} or […] with your own values
2Platform CLI: remote server
codex mcp add scopegate --url https://scopegate.dev/api/mcp/{api_key}1Template address
The server address is a template: replace {…} or […] with your own values
2Config file
{
"mcpServers": {
"scopegate": {
"url": "https://scopegate.dev/api/mcp/{api_key}"
}
}
}1Template address
The server address is a template: replace {…} or […] with your own values
2Config file
{
"servers": {
"scopegate": {
"type": "http",
"url": "https://scopegate.dev/api/mcp/{api_key}"
}
}
}1Template address
The server address is a template: replace {…} or […] with your own values
2Platform CLI: remote server
gemini mcp add -t http scopegate https://scopegate.dev/api/mcp/{api_key}Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about ScopeGate
How do I install ScopeGate in Claude Code?
Add the MCP server with claude mcp add --transport http scopegate https://scopegate.dev/api/mcp/{api_key}. Replace {api_key} with your endpoint key.
What does ScopeGate do?
It gives an agent an MCP endpoint limited to selected actions in connected services. Calls are logged, and you can revoke an endpoint key without disconnecting the service.
What do I need to connect services when self-hosting?
Copy .env.example to .env and provide the OAuth client ID and secret for each provider you want to connect. Provider settings are independent.
