mcpbeat Sign in

Gatekeeper MCP Server

by runestone-labs Your server? Claim it
local only

Gatekeeper runs on your own machine — the client starts it, so there is no endpoint to ping. 41 installs a week from npm. Last commit 5 Sep 2026.

Run MCP tool calls through Runestone Gatekeeper — policy enforcement, human approval, audit.

Installs per day peak 156 · avg 13 · -74% w/w
a month agotoday
41
Installs / week
npm · @runestone-labs/gatekeeper-mcp
0
Stars
0 open issues
5 Sep 2026
Last commit
0 releases in 90 days
Apache-2.0
License
TypeScript

What the code does

We read the source, 1 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command integrations/cli/src/index.ts:134
    spawn(command, args, { detached: true, stdio: 'ignore' }).unref();

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add gatekeeper -- npx -y @runestone-labs/gatekeeper-mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "gatekeeper": {
      "args": [
        "-y",
        "@runestone-labs/gatekeeper-mcp"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.gatekeeper]
command = "npx"
args = ["-y", "@runestone-labs/gatekeeper-mcp"]
.cursor/mcp.json
{
  "mcpServers": {
    "gatekeeper": {
      "args": [
        "-y",
        "@runestone-labs/gatekeeper-mcp"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "gatekeeper": {
      "args": [
        "-y",
        "@runestone-labs/gatekeeper-mcp"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: GATEKEEPER_ROLE (Policy role this server presents to Gatekeeper for every call. Required.), GATEKEEPER_URL (Base URL of the Gatekeeper server. Default http://127.0.0.1:3847.), GATEKEEPER_AGENT_NAME (Agent name recorded in Gatekeeper audit logs. Default mcp-client.), GATEKEEPER_RUN_ID (Optional run-correlation id so calls count toward one per-run budget.). The author declared them in the registry entry; get the values from the project itself.

Alternatives to Gatekeeper

same job, measured the same way
Cordon for MCP
by marras0914

Cordon for MCP. Security gateway with policy enforcement, audit log, and HITL approvals.

44 installs/wk local only
signet-eval
by jmcentire

Deterministic policy enforcement and MCP management for AI agent tool calls.

local only
Aegis — AI Agent Governance
by acacian

Policy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.

488 installs/wk local only
Sidclaw Governance MCP
by vladuzh

Governance proxy for MCP servers — policy evaluation, human approval, audit trails.

39 installs/wk local only
Quill
by manumarri-sudo

Pre-execution gate for AI-agent tool calls. Touch ID approval. Tamper-evident audit log.

85 installs/wk local only
MCP Hangar
by mcp-hangar

Policy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT.

1 984 installs/wk local only
AxioRank: Zero-Trust for AI Agents
by axiorank

Zero-trust gateway for AI agents: score tool calls, verify agent cards, enforce policy, audit.

22 tools answering
MCP Sentinel
by oaslananka

Zero-trust MCP security proxy with policy enforcement, PII scrubbing, approvals, and audit trails.

local only

Gatekeeper — questions

Answers built from our own checks of this server.

Why is there no uptime for Gatekeeper?
Gatekeeper runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @runestone-labs/gatekeeper-mcp was installed 41 times last week.
How do I connect Gatekeeper?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @runestone-labs/gatekeeper-mcp straight from npm; nothing to host, nothing to sign up for.
How many people use Gatekeeper?
The npm package @runestone-labs/gatekeeper-mcp was installed 41 times in the last week. Week over week that is -74%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Gatekeeper open source?
Yes — it is published under the Apache-2.0 licence, written in TypeScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.