Gate Authority Network MCP server

GATE — Authority Verification Network

Stage 17 Developer Preview · Live public adoption

Does a live delegation path from this principal to this actor still exist right now?

GATE is the live authority-state resolver for delegated agents across trust domains.

It resolves whether a currently valid authority path still exists at effect time using live authority state from external trust domains. GATE does not mint a proprietary delegation token, replace OAuth, replace your policy engine, or require MCP.

GATE Stage 17 — current Developer Preview

Current operational boundary: one Canadian primary database, no production regional replicas, and no independent third-party issuer propagation SLA. maxStalenessMs measures primary snapshot age only. The Developer Preview is not enterprise GA.

• Start with the hosted sandbox — synthetic graph for learning GATE revocation semantics.
• Create a real Free GATE Network project — live gate-network with a real API key and managed quota.
• Connect your own ES256 authority source.
• Stage 16 frozen public baseline release.
• Stage 17E Free → paid continuity and billing hardening.
• Stage 17D external problem validation.
• Production / preview runtime boundary.
• Current API, topology and limitations.

Stage 17 has validated real Free onboarding, independent CAEP/SSF revocation interoperability, external problem validation, and Free-to-paid entitlement continuity. GATE remains a Developer Preview: independent adoption and enterprise-scale operation are the next validation targets.

Where GATE fits

Identity / credentials / policy / issuer systems
                      |
                      | authority state + trust signals
                      v
             +-------------------+
             |       GATE        |
             | live authority    |
             | state resolver    |
             +-------------------+
                      |
                 gate.verify()
                      |
                      v
             trusted effect boundary

GATE complements identity, credential, policy and gateway systems. MCP is one integration surface, not GATE's definition.

The differentiator is not multi-hop alone. It is the combination of live upstream revocation, alternate-path preservation, federated issuer state, freshness semantics and protocol-neutral effect-time resolution.

Read: docs/POSITIONING.md, docs/INTEGRATION-MODEL.md, docs/RELEASE-BOUNDARY.md.

Public Developer Quickstart

GATE exposes two separate onboarding paths.

Sandbox

Use the hosted sandbox to learn GATE semantics on a synthetic authority graph:

https://gate-phi-eosin.vercel.app/quickstart.html

Temporary key: 7 days. Quota: 500 verifications/project/day.

Live Free Network

Canonical endpoint:

https://ufqtoyakmrddqytrkcje.supabase.co/functions/v1/gate-network

Current Free Developer Preview: 50,000 verifications/month, 1 authority issuer, bounded consistency. Strict consistency is not included.

Use GateClient from @gate-avn/sdk. See docs/QUICKSTART.md for the complete live-network flow.

5-minute demo

Requirements: Node.js 20+.

npm install
npm test
npm run demo

The demo calls the public SDK shape:

import { GateClient } from './packages/sdk/dist/index.js';

const gate = new GateClient({ endpoint: process.env.GATE_URL });

const result = await gate.verify({
  principal: 'user:jerome',
  actor: 'agent:C@company-c',
  action: {
    protocol: 'mcp',
    name: 'delete_customer_data',
    resource: 'customer:3456'
  },
  consistency: 'bounded',
  maxStalenessMs: 200
});

Shortened. The full README is on GitHub.