Gatekeeper MCP server

by Runestone-Labs·io.github.Runestone-Labs/gatekeeper·v0.1.2

Run MCP tool calls through Runestone Gatekeeper — policy enforcement, human approval, audit.

A91/100grade A

What users say

No reviews yet

Safety scan

A91/100

Adoption

Growing

0 stars34 downloads/wk

Reviews

Nobody has reviewed Gatekeeper yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings

Code scan12 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 15 days ago15/15
Maintainer identityregistry namespace matches repository owner7/10

Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @runestone-labs/gatekeeper-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add gatekeeper -- npx -y @runestone-labs/gatekeeper-mcp

Is Gatekeeper MCP server safe?: Yes, by our scan: it is graded A (91/100). Read the Gatekeeper safety report
How do I install Gatekeeper?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Gatekeeper need an API key?: No secret keys are declared. It reads 4 settings from the environment.
Is Gatekeeper maintained?: The last commit was 15 days ago (2026-09-05). The latest release is v0.1.2.
What can I use instead of Gatekeeper?: Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server, QVeris MCP server and Dashclaw MCP server. Compare all Gatekeeper alternatives.

Same job from other publishers: the closest match first, then the best rated.

SSH — policy-gated remote access
Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.
not reviewed
Established
B
QVeris
Discover, inspect, quote, and call external tools, with usage and final credit settlement audits
not reviewed
Established
A
Dashclaw
Policy checks, approvals, records, and governed HTTP capabilities for unattended agents.
not reviewed
Established
B

Local package. It runs on your machine, not through the gateway.

GATEKEEPER_ROLEPolicy role this server presents to Gatekeeper for every call. Required.
GATEKEEPER_URLBase URL of the Gatekeeper server. Default http://127.0.0.1:3847.
GATEKEEPER_AGENT_NAMEAgent name recorded in Gatekeeper audit logs. Default mcp-client.
GATEKEEPER_RUN_IDOptional run-correlation id so calls count toward one per-run budget.

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/runestone-labs-gatekeeper.svg)](https://mcp.market/server/runestone-labs-gatekeeper)