ContractGate MCP server

Read from the package source without running it. The installed server may list more.

• deploy_contractwrite action

  POST /contracts/deploy — find-or-create by name, insert YAML as stable, deprecate prior stable. 409 if that (name, version) exists: bump version in the YAML. Refused while quarantine is pending. Save the returned contract_id.

• get_quarantine

  GET /quarantine — rejected events for the caller's org, newest first, with violation details.

• infer_contract

  Generate draft ContractGate YAML from real JSON sample events via POST /contracts/infer. Does not persist. Review and write the YAML to contracts/<name>.yaml before deploying.

• list_contracts

  GET /contracts — identities the API key can see.

• validate_events

  Validate events. Pass contract_id to hit POST /v1/ingest/{id} (dry_run defaults true — no audit, quarantine, or usage). Pass yaml_content to hit POST /playground/validate per event (never persists). Exactly one of contract_id or yaml_content. 207/422 responses are returned as data so you can apply each violation's suggestion.

• Code scan9 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 2 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Grade history

• 2026-09-19restoreC → Bscore 83

ContractGate: common questions

Is ContractGate MCP server safe?

Mostly: it is graded B (83/100). Read the ContractGate safety report

How do I install ContractGate?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does ContractGate need an API key?

Yes. The registry entry asks for CONTRACTGATE_API_KEY.

Is ContractGate maintained?

The last commit was 3 days ago (2026-09-17). The latest release is v0.1.2.

What can I use instead of ContractGate?

Servers from other publishers that do the same job: Omnara MCP server, ShipStatic MCP server and Mockzilla MCP server. Compare all ContractGate alternatives.