Gatewerk MCP server
io.github.gatewerk/mcp·v1.1.4·1 starsThe open-source review layer for AI agents. Work done for humans is decided by humans.
1 stars50 downloads/wk
Reviews
Write oneNobody has reviewed Gatewerk yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Gatewerk tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it
- Code scan23 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 11 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
How Gatewerk compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,255 servers
- GitHub stars
- 1
- more than 65% of 28,688 servers
- Downloads a week
- 50
- more than 42% of 12,191 servers with a package
Install Gatewerk in Claude Code, Cursor or VS Code
Runs npx -y @gatewerk/mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp -- npx -y @gatewerk/mcp
What the publisher says
From the Gatewerk repository's README, as published. We do not edit it. Read it on GitHub
Gatewerk
The open source review layer for AI agents.
One inbox where your agents' actions stop and wait for a person.
Review the exact payload, edit it, decide. Every decision on the record.
Your AI agent drafts an email, generates a report, or initiates a transaction. Before it reaches the real world, a human reviews it in a structured form, edits what needs fixing, and sends the decision back. The agent learns from what humans changed.
Works with any agent framework. Self hosted. Open source (AGPL-3.0; client SDKs are Apache-2.0). See LICENSING.md.
Why Gatewerk?
Your agents act for you: they send the proposals, run the campaigns, handle the invoices, write the replies. Before an action leaves the building, a human should decide. Gatewerk is the review layer between your agents and the real world. Human judgment enters the pipeline, exactly where you choose.
- Structured review forms: not just "approve/deny", but rich templates with editable fields.
- Feedback memory: agents query past decisions to improve over time
- Self hosted: your server, your data, no SaaS dependency
- Protocol first: works with any agent framework via REST API, TypeScript/Python SDKs, or MCP
Use Cases
Before Sending
Email drafts, customer support replies, Slack messages, SMS campaigns, outreach to candidates, proposals to clients
Before Executing
Code deployments, database migrations, financial transactions, infrastructure changes, API calls to third-party services
Before Publishing
Blog posts, social media content, ad campaigns, product listings, documentation updates, press releases, reports
Before Approving
Expense reports, refund requests, access permissions, contract terms, insurance claims, purchase orders
Between the gates, agents can also bring you the judgment calls: classify the edge case, pick the path, resolve the exception. Gatewerk makes human judgment callable: agents ask a structured question, you answer typed, and the pipeline continues.
How It Works
sequenceDiagram
participant Agent
participant API as Gatewerk API
participant Reviewer as Reviewer Dashboard
participant Webhook as Agent via webhook
Agent->>API: POST /reviews (template + payload)
API->>Reviewer: Review appears in inbox
Reviewer->>API: Approve / Reject / Edit
API->>Webhook: Decision + edited payload
Webhook->>Agent: Deliver decision
Agent->>API: GET /feedback (learn from past decisions)Works With Any Agent Framework
Gatewerk is protocol-first, not framework-specific. Your agent framework already has a way to make HTTP calls or use MCP: that's all you need.
A review, not a yes/no ping
Without a review layer, every agent grows its own approval hack: a Slack button here, a weekend dashboard there, a shared sheet nobody audits. You end up building the same thing over and over, once per workflow. Gatewerk is that layer built once, properly:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Gatewerk: common questions
- Is Gatewerk MCP server safe?
- Mostly: it is graded B (82/100). Read the Gatewerk safety report
- How do I install Gatewerk?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Gatewerk need an API key?
- Yes. The registry entry asks for
GATEWERK_API_KEY. - Is Gatewerk maintained?
- The last commit was 12 days ago (2026-10-23). The latest release is v1.1.4.
- How does Gatewerk compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,255 servers); github stars 1 (more than 65% of 28,688 servers); downloads a week 50 (more than 42% of 12,191 servers with a package). Full comparison.