MCP.Market

Vantio Gate MCP server

by vantioai·io.github.vantioai/vantio-gate·v0.1.0·1 stars
No reviews yet

Vantio Gate — Policy Latch dry-run evaluate for agents. No live enforce from MCP.

B82/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B82/100

full report

Adoption
Growing

1 stars25 downloads/wk

Reviews

Write one

Nobody has reviewed Vantio Gate yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Vantio Gate tools (6)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • gate_evaluate

    Dry-run evaluate a hostname/bytes/spend against a Gate policy. Never blocks network I/O. Pass policy JSON or omit to use defaults / last fetched shape.

  • gate_explain

    Explain Vantio Gate (Policy Latch), dry-run fence, and what this MCP will never do.

  • gate_get_policy

    Fetch current tenant policy from the Vantio Gate control plane (Pro). Requires VANTIO_API_KEY. Read-only.

  • gate_normalize_policy

    Normalize and validate a policy object to Gate's canonical schema (coerce bad fields to safe defaults).

  • gate_residual_risk

    Fetch residual-risk / dry-run / enforcement-gap ledger from Pro. Requires VANTIO_API_KEY. Read-only.

  • gate_upgrade_path

    Return Optics → Gate → Phantom Engine ladder. Use when residual bypass must close.

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Vantio Gate compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
82/100
higher than 63% of 48,255 servers
Tools
6
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 28,688 servers
Downloads a week
25
more than 11% of 12,191 servers with a package

What its tools let an agent do: 6 read

Install Vantio Gate in Claude Code, Cursor or VS Code

Runs npx -y @vantio/gate-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add vantio-gate -- npx -y @vantio/gate-mcp
Add to Cursor

What the publisher says

From the Vantio Gate repository's README, as published. We do not edit it. Read it on GitHub

Vantio Optics (Open Core)

Free, local-first observability for AI agent egress. See what your agents call out to — without ever reading the conversation.

npm install -g @vantio/cli
vantio run node agent.js

That's the integration. Optics intercepts outbound calls to known LLM providers and reports destination, process, size, and timing — never prompts or completions.

Python: pip install vantio-agent-sdk, then wrap your agent with @shield.

Optics is the free Observe tier. Phantom Engine (Enforce + Control) extends this to policy enforcement and host-level runtime protection on enrolled Linux systems. Full docs: vantio.ai/docs.

Supported runtimes

That's the only install step. Works on macOS, Linux, and Windows (WSL).

On Node: fetch, undici, http/https, http2, net/tls, WebSocket, and spawned curl or wget.

vantio run only injects the Node interceptor (NODE_OPTIONS --require) for node / npx / tsx / ts-node.

Python support requires vantio-agent-sdk. Follow the current Python SDK example and verify that a supported outbound event appears before relying on the coverage state. Prefixing vantio run python does not intercept by itself.

Browser paths stay outside this wrap.

What is recorded

Optics records connection and process metadata from supported wrapped agent paths. Does not block actions or retain prompts or completions.

Vantio records that a call was made, when, to which provider, and how many bytes — nothing more.

What is never recorded

  • The content of your prompts
  • Model completions or responses
  • Any personally identifiable information

Present coverage boundaries

vantio run intercepts LLM calls by patching globalThis.fetch in the Node.js runtime (via NODE_OPTIONS --require). This covers the vast majority of real agents — every OpenAI SDK call, every LangChain.js call, every Vercel AI SDK call — without any code changes.

It can be bypassed. A process can:

  • Call an LLM endpoint directly through a native socket without using fetch
  • Spawn a subprocess that isn't started with vantio run
  • Use a language runtime other than Node without installing the Python SDK

This is intentional, not a bug. Vantio Optics surfaces your governance gap honestly.

Without the SDK, vantio run python does not intercept. Browser paths, or processes not started with vantio run / shield(), never hit Optics — and Optics does not invent a record for them.

License and telemetry

MIT License.

Telemetry is disabled by default. Set VANTIOTELEMETRY=1 to opt in. VANTIOTELEMETRYDISABLED=1 or DONOT_TRACK=1 override.

Upgrade path to Phantom Engine and Enterprise

Free Optics needs no account and no API key.

Optics is the free Observe tier. Phantom Engine (Enforce + Control) extends this to policy enforcement and host-level runtime protection on enrolled Linux systems.

Residual risk closes with Vantio Phantom Engine ($799/node/mo) — see vantio.ai/pricing. Enterprise governance is available on top — talk to sales.

Nothing above is checked by us. What we check is on the safety report.

Vantio Gate: common questions

Is Vantio Gate MCP server safe?
Mostly: it is graded B (82/100). Read the Vantio Gate safety report
How do I install Vantio Gate?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Vantio Gate need an API key?
Yes. The registry entry asks for VANTIO_API_KEY.
Is Vantio Gate maintained?
The last commit was 40 days ago (2026-09-25). The latest release is v0.1.0.
How does Vantio Gate compare with other MCP servers?
safety score 82/100 (higher than 63% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.