Agent Gate runs on your own machine — the client starts it, so there is no endpoint to ping. 93 installs a week from npm.
Local mandate gate and proof trail for AI agents that take consequential actions.
Today is the operative word: we check Agent Gate every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add agent-gate -e 'FORGE_TENANT_ID=<FORGE_TENANT_ID>' -- npx -y forge-agent-gate
{
"mcpServers": {
"agent-gate": {
"command": "npx",
"args": [
"-y",
"forge-agent-gate"
],
"env": {
"FORGE_TENANT_ID": "<FORGE_TENANT_ID>"
}
}
}
}
[mcp_servers.agent-gate]
command = "npx"
args = ["-y", "forge-agent-gate"]
env = { FORGE_TENANT_ID = "<FORGE_TENANT_ID>" }
{
"mcpServers": {
"agent-gate": {
"command": "npx",
"args": [
"-y",
"forge-agent-gate"
],
"env": {
"FORGE_TENANT_ID": "<FORGE_TENANT_ID>"
}
}
}
}
{
"servers": {
"agent-gate": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"forge-agent-gate"
],
"env": {
"FORGE_TENANT_ID": "<FORGE_TENANT_ID>"
}
}
}
}
Put your own value in place of
<FORGE_TENANT_ID> (Tenant id stamped into every proof-trail record).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
FORGE_API_KEY (Forge decision-API key (starts with fi_). Set this or FORGE_BEARER_TOKEN), FORGE_BEARER_TOKEN (Alternative to FORGE_API_KEY: a Forge bearer token for the decision API), FORGE_API_BASE_URL (Base URL of the Forge decision API. Defaults to the hosted Forge cloud), FORGE_RECORD_MODE (required = fail-closed (block if Forge cannot record); best_effort = execute anyway), AGENT_GATE_MANDATE_PATH (Absolute path to the signed mandate (policy) JSON. Create it with `forge-agent-gate init`), AGENT_GATE_KILL_FILE (If this file exists, every gated write is hard-blocked (master kill switch)), KALSHI_API_KEY_ID (Kalshi API key id. Only for the live Kalshi venue adapter; stays on your machine), KALSHI_PRIVATE_KEY_PATH (Path to your Kalshi RSA private key. Only for the Kalshi venue adapter), KALSHI_ENV (Kalshi environment: demo or prod. Only for the Kalshi venue adapter).
Approval gate and audit trail for AI agent actions: policy check first, proof after. Any MCP client.
Passport, mandate, fail-closed action gate and tamper-evident journal for AI agents.
Local-first project memory and mistake-prevention guardrails for AI coding agents.
Local, private memory for coding agents: facts, skills and tasks that persist across sessions.
Pre-execution policy gate for consequential agent actions with durable trust receipts.
Exact-action approval for consequential agent actions: request, track, and verify signed receipts.
Constitutional guardrails and loop detection for AI agents
MCP bridge for tamper-evident evidence around consequential AI and agent decisions.
Answers built from our own checks of this server.