# ScopeGate

ScopeGate gives AI agents MCP access to selected actions in connected services and records their calls. Use it to keep an agent’s access to an account narrow.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 18
- Author: alifanov
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/alifanov/scopegate
- Updated: 2026-10-22
- HTML: https://affpapa.org/en/nevibecode/mcp/scopegate

## What it does

ScopeGate sits between an AI agent and connected services. Each MCP endpoint exposes only the actions you select: an agent could read email without being allowed to send it. The service registry covers 27 providers, including Google Workspace, Slack, Notion, and Stripe.

Calls are recorded with the tool, outcome, and duration, and project logs can be exported. You can revoke an endpoint key while keeping its service connection active. Tokens are encrypted at rest; agents receive a ScopeGate key instead.

For a self-hosted setup, run `docker compose --profile local up`. To connect real services, copy `.env.example` to `.env` and add the OAuth client ID and secret for each provider you want to use. A provider without those credentials won’t appear in the app.

## Requirements
- Remote server: `https://scopegate.dev/api/mcp/{api_key}`

## Install

### Claude Code (native platform)

1. **Template address**
- The server address is a template: replace {…} or […] with your own values

2. **Platform CLI: remote server**
```bash
claude mcp add --transport http scopegate https://scopegate.dev/api/mcp/{api_key}
```

### Codex

1. **Template address**
- The server address is a template: replace {…} or […] with your own values

2. **Platform CLI: remote server**
```bash
codex mcp add scopegate --url https://scopegate.dev/api/mcp/{api_key}
```

### Cursor

1. **Template address**
- The server address is a template: replace {…} or […] with your own values

2. **Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "scopegate": {
            "url": "https://scopegate.dev/api/mcp/{api_key}"
        }
    }
}
```

### GitHub Copilot

1. **Template address**
- The server address is a template: replace {…} or […] with your own values

2. **Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "scopegate": {
            "type": "http",
            "url": "https://scopegate.dev/api/mcp/{api_key}"
        }
    }
}
```

### Gemini CLI

1. **Template address**
- The server address is a template: replace {…} or […] with your own values

2. **Platform CLI: remote server**
```bash
gemini mcp add -t http scopegate https://scopegate.dev/api/mcp/{api_key}
```

## When to use it
- allow an agent to read email but not send it
- create a separate MCP endpoint for a project
- review an agent’s request log
- revoke an endpoint key while retaining the service connection

## Example prompts
- Read my email through the connected Gmail service.
- Find calendar events using the connected service.
- List the Google Drive files this endpoint can access.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 392262
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89609
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12110
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7718
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2066
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1816

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md