Skip to content

v0.7.0 — gate any MCP client

Pre-release
Pre-release

Choose a tag to compare

View all tags
@cryptojaz cryptojaz released this 19 Sep 15:47
· 9 commits to main since this release
v0.7.0
c2ed6d6

toolgate now runs two ways: the Claude Code hook, and an MCP proxy that gates any MCP client — Cursor, Claude Desktop, Cline, or your own agent.

toolgate mcp -- npx -y @modelcontextprotocol/server-github

toolgate launches the downstream server, proxies the stdio JSON-RPC transport, and gates every tools/call through the same engine as the hook. Allowed calls forward untouched; a denied one (and, by default, an ask) never reaches the server — the client gets a normal tool result marked isError with the reason, so the agent relays it instead of crashing.

  • --on-ask block|allow, --gate <regex>, and TOOLGATE_TASK / ~/.toolgate/task for context.
  • MCP carries tool calls, not the conversation, so without a task the gate is stricter, never more permissive.
  • Never fails open: an internal proxy error blocks the call with a visible reason.
  • Same engine, policy, redaction and audit as the hook — a new transport, not new decisioning.

npm i -g @riskaverse/toolgate

Assets 2
Loading