agentgate MCP server

by ciceroyang·io.github.ciceroyang/agentgate·v0.3.0

Read-only evidence for the tools agents run: MCP server records, coverage and policy.

B77/100grade B

What users say

No reviews yet

Safety scan

B77/100

Adoption

Growing

0 stars626 downloads/wk

Reviews

Nobody has reviewed agentgate yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

check_projectwrite action
Run agentgate's own checks over a local directory: MCP client configuration, hooks, manifests and source patterns a policy would refuse. It only reads files; it does not install, execute or upload anything, and it does not scan the network.
coverage_report
Report the coverage distribution of the whole index: how many records are fully measured, what stopped the rest, and how many findings came out of the work that ran. It is the same number the project quotes in public.
inventory_tools
Given the MCP servers and agent tools you actually use, report which ones the index has evidence for, which need your exact version, and which it has never measured. Nothing is uploaded and nothing is executed.
lookup_server
Look up one MCP server, or one package, in the local agentgate evidence index. Returns the verdict, the coverage block (which scanners ran, which did not, and why), and the findings. A record that is incomplete is reported as incomplete, never as clean.

scanner v0.1.8 · 2026-09-19 · same rubric, same numbers if you re-run it

2 medium

Code scan64 source files scanned15/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

mediumsubprocess with shell=Trueexec.shell-true

packages/guard/src/checks/source-injection.mjs: …True/, message: "subprocess called with shell=True" }, { rule: "AG-SRC-002", severity: "…

mediumeval / new Function usedexec.eval

packages/guard/src/checks/source-injection.mjs: ….\w])eval\s*\(\s*[A-Za-z_$]/, message: "eval() on a non-literal argument" }, { rule…

Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

2026-09-19restoreD → Bscore 77: subprocess with shell=True; eval / new Function used
2026-09-19restoreF → Dscore 54: curl | sh in a script; Base64 decoded then executed; subprocess with shell=True

Runs npx -y @zhiliangtech/agentgate on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add agentgate -- npx -y @zhiliangtech/agentgate

Is agentgate MCP server safe?: Mostly: it is graded B (77/100). Read the agentgate safety report
How do I install agentgate?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does agentgate need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is agentgate maintained?: The last commit was 2 days ago (2026-09-19). The latest release is v0.3.0.
What can I use instead of agentgate?: Servers from other publishers that do the same job: Dashclaw MCP server.

Same job from other publishers: the closest match first, then the best rated.

Dashclaw
Policy checks, approvals, records, and governed HTTP capabilities for unattended agents.
not reviewed
Established
B