AgentGate

NPM · @AGENTKITAI/AGENTGATE-MCP · SCANNED AUG 3

Human-in-the-loop approval gateway for AI agents over MCP: request, decide, approve.

Available components

+51 this week 75 75 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (97 of 101), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (97 of 101), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency84

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Cryptographically verified build provenance (signed, bound to agentkitai/agentgate). View diagnostics → Pass
License check failed: no license is declared. See how to fix → Fail
Actively maintained (last published 37 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability66

AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 562 tokens (~56/item across 10 items; 10 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @agentkitai/agentgate-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add agentkitai-agentgate -- npx -y @agentkitai/agentgate-mcp

# add to Codex CLI

codex mcp add agentkitai-agentgate -- npx -y @agentkitai/agentgate-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "agentkitai-agentgate": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@agentkitai/agentgate-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add agentkitai-agentgate --command npx --arg -y --arg @agentkitai/agentgate-mcp

# ~/.hermes/config.yaml

mcp_servers:
  agentkitai-agentgate:
    command: "npx"
    args: ["-y", "@agentkitai/agentgate-mcp"]

// mcp.json

{
  "mcpServers": {
    "agentkitai-agentgate": {
      "command": "npx",
      "args": [
        "-y",
        "@agentkitai/agentgate-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +34
- Malware scan: pass → unverified ▼ security
- Provenance: unverified → pass ▲ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- The attested source repository moved: agentkitai/agentgate security
- License: unverified → fail ▼ functional
- Capabilities: pass → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
- Schema quality: unverified → good ▲ functional
- Maintenance: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
1 Aug 26 +13
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
31 Jul 26 +2
- Malware scan: pass → unverified ▼ security
- Security disclosure: unverified → fail ▼ functional
- Dependency health: partial → unverified ▼ functional
- Tool coverage: unverified → 100 ▲ functional
29 Jul 26 −20
- Tool coverage: 100 → unverified ▼ functional
- Security disclosure: fail → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
28 Jul 26 +22
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: pass functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 100 functional
- First check of Schema quality: unverified functional
27 Jul 26 24

First indexed and scored.

Show 4 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@agentkitai/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:: agentkitai/agentgate
Certificate issuer:: https://token.actions.githubusercontent.com
Certificate SAN:: https://github.com/agentkitai/agentgate/.github/workflows/publish-mcp.yml@refs/tags/mcp-v0.0.3
Rekor log index:: 1971372566
Predicate type:: https://slsa.dev/provenance/v1
Subject digest:: sha512:60e33966971de4977f872d43dbd58dcd0fad48a5259fadc7ce196c53c42d42d3ebd3ede0db08a74e406e990559d6118f14131ec8323d0c8cef0e0f1f7
Discovery method:: attestation_endpoint

Dependencies 97 packages

97 packages in the resolved dependency tree · 96 deprecated · 30 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 10 exposed · ~562 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

agentgate_create_policy ~69

Create a new policy with rules.

Input Output Examples

Name	Type	Req	Description
enabled	boolean	—	Whether policy is enabled (default true)
name	string	yes	Policy name
priority	number	—	Policy priority (default 100)
rules	array	yes	Array of policy rules with match conditions and decisions

No output schema declared.

No examples provided.

agentgate_decide ~77

Approve or deny a pending request. Use when you are the designated approver.

Input Output Examples

Name	Type	Req	Description
decidedBy	string	—	Who is making this decision (default: "mcp:user")
decision	string	yes	Your decision
id	string	yes	Request ID
reason	string	—	Reason for decision (optional)

No output schema declared.

No examples provided.

agentgate_delete_policy ~25

Delete a policy by ID.

Input Output Examples

Name	Type	Req	Description
id	string	yes	Policy ID

No output schema declared.

No examples provided.

agentgate_get ~29

Get the current status of an approval request by ID.

Input Output Examples

Name	Type	Req	Description
id	string	yes	Request ID

No output schema declared.

No examples provided.

agentgate_get_audit_actors ~21

Get unique actor values from audit logs.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

agentgate_list ~39

List approval requests with optional filters.

Input Output Examples

Name	Type	Req	Description
limit	number	—	Max results (default 10)
status	string	—	Filter by status

No output schema declared.

No examples provided.

agentgate_list_audit_logs ~127

List audit log entries with optional filters and pagination.

Input Output Examples

Name	Type	Req	Description
action	string	—	Filter by action
actor	string	—	Filter by actor
eventType	string	—	Filter by event type
from	string	—	Start date (ISO format)
limit	number	—	Max results (default 50, max 100)
offset	number	—	Offset for pagination
requestId	string	—	Filter by request ID
status	string	—	Filter by status
to	string	—	End date (ISO format)

No output schema declared.

No examples provided.

agentgate_list_policies ~18

List all policies ordered by priority.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

agentgate_request ~89

Submit an approval request. Returns request ID and initial status.

Input Output Examples

Name	Type	Req	Description
action	string	yes	Action being requested (e.g., "send_email", "make_purchase")
context	object	—	Additional context for the approver
params	object	—	Action parameters (e.g., { to: "[email protected]", subject: "..." })
urgency	string	—	Request urgency

No output schema declared.

No examples provided.

agentgate_update_policy ~68

Replace an existing policy (all fields required).

Input Output Examples

Name	Type	Req	Description
enabled	boolean	—	Whether policy is enabled
id	string	yes	Policy ID
name	string	yes	Policy name
priority	number	—	Policy priority
rules	array	yes	Array of policy rules

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug