# AgentGate (npm · @agentkitai/agentgate-mcp)

Human-in-the-loop approval gateway for AI agents over MCP: request, decide, approve.

- Trust score: 75/100 (medium)
- Change this week: +51
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@agentkitai/agentgate-mcp`: 75/100 (this document), [markdown](https://verifymcp.io/servers/agentkitai-agentgate/agentkitai-agentgate-mcp.md), [page](https://verifymcp.io/servers/agentkitai-agentgate/agentkitai-agentgate-mcp)

## Channel facts

- Registry: `npm`
- Package: `@agentkitai/agentgate-mcp`
- Version: `0.0.3`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (97 of 101), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (97 of 101), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 84/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to agentkitai/agentgate).
  - License check failed: no license is declared.
  - Actively maintained (last published 37 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 66/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 562 tokens (~56/item across 10 items; 10 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add agentkitai-agentgate -- npx -y @agentkitai/agentgate-mcp
```

### Codex

```bash
codex mcp add agentkitai-agentgate -- npx -y @agentkitai/agentgate-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "agentkitai-agentgate": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@agentkitai/agentgate-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add agentkitai-agentgate --command npx --arg -y --arg @agentkitai/agentgate-mcp
```

### Hermes

```yaml
mcp_servers:
  agentkitai-agentgate:
    command: "npx"
    args: ["-y", "@agentkitai/agentgate-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "agentkitai-agentgate": {
      "command": "npx",
      "args": [
        "-y",
        "@agentkitai/agentgate-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 75, +34)

- [security regression] Malware scan: pass → unverified
- [security improvement] Provenance: unverified → pass
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [security] The attested source repository moved: agentkitai/agentgate
- [functional regression] License: unverified → fail
- [functional regression] Capabilities: pass → unverified
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Schema quality: unverified → good
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Stability: unverified → 0.23

### 2026-08-01 (score 41, +13)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 28, +2)

- [security regression] Malware scan: pass → unverified
- [functional regression] Security disclosure: unverified → fail
- [functional regression] Dependency health: partial → unverified
- [functional improvement] Tool coverage: unverified → 100

### 2026-07-29 (score 26, −20)

- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Security disclosure: fail → unverified
- [functional improvement] Dependency health: unverified → partial

### 2026-07-28 (score 46, +22)

- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Schema quality: pass
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 24)

First indexed and scored.

## MCP tools (10)

### `agentgate_request` (~89 tokens)

Submit an approval request. Returns request ID and initial status.

Input parameters:

- `action` (string, required): Action being requested (e.g., "send_email", "make_purchase")
- `context` (object): Additional context for the approver
- `params` (object): Action parameters (e.g., { to: "user@example.com", subject: "..." })
- `urgency` (string): Request urgency

### `agentgate_get` (~29 tokens)

Get the current status of an approval request by ID.

Input parameters:

- `id` (string, required): Request ID

### `agentgate_list` (~39 tokens)

List approval requests with optional filters.

Input parameters:

- `limit` (number): Max results (default 10)
- `status` (string): Filter by status

### `agentgate_decide` (~77 tokens)

Approve or deny a pending request. Use when you are the designated approver.

Input parameters:

- `decidedBy` (string): Who is making this decision (default: "mcp:user")
- `decision` (string, required): Your decision
- `id` (string, required): Request ID
- `reason` (string): Reason for decision (optional)

### `agentgate_list_policies` (~18 tokens)

List all policies ordered by priority.

### `agentgate_create_policy` (~69 tokens)

Create a new policy with rules.

Input parameters:

- `enabled` (boolean): Whether policy is enabled (default true)
- `name` (string, required): Policy name
- `priority` (number): Policy priority (default 100)
- `rules` (array, required): Array of policy rules with match conditions and decisions

### `agentgate_update_policy` (~68 tokens)

Replace an existing policy (all fields required).

Input parameters:

- `enabled` (boolean): Whether policy is enabled
- `id` (string, required): Policy ID
- `name` (string, required): Policy name
- `priority` (number): Policy priority
- `rules` (array, required): Array of policy rules

### `agentgate_delete_policy` (~25 tokens)

Delete a policy by ID.

Input parameters:

- `id` (string, required): Policy ID

### `agentgate_list_audit_logs` (~127 tokens)

List audit log entries with optional filters and pagination.

Input parameters:

- `action` (string): Filter by action
- `actor` (string): Filter by actor
- `eventType` (string): Filter by event type
- `from` (string): Start date (ISO format)
- `limit` (number): Max results (default 50, max 100)
- `offset` (number): Offset for pagination
- `requestId` (string): Filter by request ID
- `status` (string): Filter by status
- `to` (string): End date (ISO format)

### `agentgate_get_audit_actors` (~21 tokens)

Get unique actor values from audit logs.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/agentkitai-agentgate/agentkitai-agentgate-mcp#diagnostics

## Score history

- 2026-08-03: 75
- 2026-08-02: 75
- 2026-08-01: 41
- 2026-07-31: 28
- 2026-07-29: 26
- 2026-07-28: 46
- 2026-07-27: 24

## Links

- npm package: https://www.npmjs.com/package/@agentkitai/agentgate-mcp
- Socket report: https://socket.dev/npm/package/@agentkitai/agentgate-mcp
- Repository: https://github.com/agentkitai/agentgate
- Changelog RSS feed: https://verifymcp.io/servers/agentkitai-agentgate/agentkitai-agentgate-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/agentkitai-agentgate/agentkitai-agentgate-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/agentkitai-agentgate/agentkitai-agentgate-mcp