mcpbeat Sign in

agentgate MCP Server

by ciceroyang Your server? Claim it
local only

agentgate runs on your own machine — the client starts it, so there is no endpoint to ping. 90 installs a week from npm. Last commit 27 Sep 2026.

Read-only evidence for the tools agents run: MCP server records, coverage and policy.

Installs per day peak 33 · avg 9 · +131% w/w
a month agotoday
90
Installs / week
npm · @zhiliangtech/agentgate
91
Stars
1 open issue
27 Sep 2026
Last commit
11 releases in 90 days
AGPL-3.0
License
JavaScript

What the code does

We read the source, 5 d ago · rules 995398eba69f

A tool parameter reaches a dangerous call

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

A tool parameter reaches a file or shell call check_project.exclude → packages/guard/bin/agent-guard.mjs:38, check_project.root → packages/mcp/src/tools.mjs:301, check_project.root → packages/mcp/src/tools.mjs:413
  if (args.out) writeFileSync(args.out, text)
Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

    const out = spawnSync(process.execPath, [script].concat(args), { stdio: "inherit", cwd: ROOT })
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    const out = spawnSync(process.execPath, [script].concat(args), { stdio: "inherit", cwd: ROOT })
Page executes code built at runtime site/en/evidence.html:16, site/evidence.html:83
…l+='<tr><td colspan=4 class="meta">Only the first 600 records are shown. Narrow the search to continue.</td></tr>';rows.innerHTML=html}
In the project's build, not in the package

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

Touches key and credential files .github/workflows/publish.yml:63
          rm -f "${NPM_CONFIG_USERCONFIG:-$HOME/.npmrc}"

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

A tool parameter here reaches a dangerous call

That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add agentgate -- npx -y @zhiliangtech/agentgate
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "agentgate": {
      "command": "npx",
      "args": [
        "-y",
        "@zhiliangtech/agentgate"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.agentgate]
command = "npx"
args = ["-y", "@zhiliangtech/agentgate"]
.cursor/mcp.json
{
  "mcpServers": {
    "agentgate": {
      "command": "npx",
      "args": [
        "-y",
        "@zhiliangtech/agentgate"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "agentgate": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@zhiliangtech/agentgate"
      ]
    }
  }
}

Alternatives to agentgate

same job, measured the same way
T
TestedMCP
by testedmcp

Read-only lookup of tested agent tools and MCP servers: scores, test evidence, deprecation.

4 tools answering
Untappd
by darrenjrobinson

MCP server exposing Untappd API tools for AI agents — full v4 read API coverage

308 installs/wk local only
Qualityforge
by ninelegsdog

Evidence-first browser QA with read-only MCP server for AI agent debugging.

38 installs/wk local only
Code Factory
by zrk222

Read-only audit evidence for security, tests, native coverage, runtime failures and repair status.

924 installs/wk local only
pagent
by aihumin

A/B testing MCP server for pagent: create, run and review A/B tests on your live website.

answering
Ratchet
by iversonwuwei

Read-only tools to inspect your agent setup: list MCP servers, flag unpinned ones, test a policy.

local only
Robokassa MCP
by artgas1

Comprehensive MCP server for the Robokassa payment gateway (18 tools, full API coverage).

80 installs/wk local only
Godot MCP Runtime
by erodenn

Zero-addon MCP server for Godot 4: agents edit, run, and play-test the game.

1 140 installs/wk local only

agentgate — questions

Answers built from our own checks of this server.

Why is there no uptime for agentgate?
agentgate runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @zhiliangtech/agentgate was installed 90 times last week.
How do I connect agentgate?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @zhiliangtech/agentgate straight from npm; nothing to host, nothing to sign up for.
How many people use agentgate?
The npm package @zhiliangtech/agentgate was installed 90 times in the last week. Week over week that is +131%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is agentgate open source?
Yes — it is published under the AGPL-3.0 licence, written in JavaScript, 91 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.