AgentGate MCP server

AgentGate Human-in-the-loop approval system for AI agents. Agents request. Policies decide. Humans approve. Keep humans in control of what AI agents can do.

Your AI agent wants to send an email, delete a file, or deploy to production. Should it? AgentGate lets you define policies that auto-approve safe actions, auto-deny dangerous ones, and route everything else to a human — via dashboard, Slack, Discord, or email.

✨ Highlights

• 🛡️ Policy engine — auto-approve, auto-deny, or route to humans based on rules
• 👥 Multi-channel approvals — Slack, Discord, email, or web dashboard
• 🔌 TypeScript SDK + MCP — works with any agent framework or Claude Desktop
• 🪝 Webhooks with retry — real-time notifications with exponential backoff
• 📝 Full audit trail — every request, decision, and action logged, each policy decision tagged with the OWASP LLM Top-10 risk it mitigates (compliance evidence)
• 🐳 Docker-ready — one docker-compose up for the full stack
• 🔐 Production-hardened — SSRF protection, ReDoS defense, structured logging, graceful shutdown
• 🔗 One-click decision links — approve or deny directly from notification emails and webhooks
• ♿ Accessible UI — keyboard-navigable approval modals, focus trapping, ARIA labels
• 💀 Skeleton loading — smooth loading states across every dashboard page
• ⚡ Fast & lightweight — Hono server, SQLite or PostgreSQL

Quickstart

# Self-host the full stack (server + dashboard + Postgres):
docker compose up

# …or from source:
pnpm install && pnpm --filter @agentkitai/agentgate-server db:migrate && pnpm --filter @agentkitai/agentgate-server bootstrap && pnpm dev

Drop AgentGate into an MCP client (Claude Desktop / Cursor / VS Code) — point it at the gateway:

{ "mcpServers": { "agentgate": { "command": "npx", "args": ["@agentkitai/agentgate-mcp"] } } }

Dashboard

See all pending requests at a glance, color-coded by urgency so you know what needs attention first.

Approval Requests

Review, approve, or deny requests — filter by status to focus on what matters.

Audit Log

Search through every decision with filters for event type, action, actor, and date range.

Request Detail

Drill into any request to see parameters, context, timeline, and audit trail — with one-click Approve/Deny buttons.

API Keys

Manage API keys with fine-grained scopes, rate limits, and usage tracking. Create, edit, or revoke keys from the dashboard.

Webhooks

Configure webhook endpoints for real-time notifications. Add URLs, pick events, and let AgentGate handle retries automatically.

Login

Sign in with your API key — create one via the CLI or ask your admin.

Table of Contents

Shortened. The full README is on GitHub.