中文 · English

Zhiliang

AgentGate · A reproducible evidence trail for the tools your agents can use.

AGPL-3.0 coreSelf-hostedRead-only public sources

Review my tool inventory Browse the public evidence index

The problem it addresses

Which tools can your agents call today? Where did each tool come from? What runs during installation? Who approved it? Did its published evidence change without a version change? These answers are often kept in a spreadsheet—or nowhere. AgentGate turns that chain into evidence that can be reproduced and reviewed.

Three invariants

  1. A result can be clean only when every required check completed. A crashed or skipped check produces incomplete and exit code 2. Policy thresholds cannot turn that into a pass.
  2. Anything not measured stays unmeasured. Missing manifests, unavailable registry metadata, and packages that could not be retrieved remain visible in the report.
  3. History is retained. Evidence changes without a version change are called out separately because that record cannot be reconstructed later.

How to use it

Self-host the service, enforce a policy in CI, or place tool calls behind the runtime gateway so the same policy can apply after deployment.

node bin/agentgate.mjs serve · node bin/agentgate.mjs check --policy policy.json · node bin/agentgate.mjs proxy --policy policy.json -- <server>

Free evidence review

You do not need to share source code. Send us a list of the MCP servers and agent tools you use. We review public registry records and published packages, then produce an evidence-based report: unpinned versions, install-time behavior, and evidence that changed without a version change after monitoring began. If something cannot be checked, the report says so instead of calling it clean.

If you want deeper coverage, run the open-source scanner inside your environment and share only its output. Your code stays on your machine.

This is currently limited to three companies for four weeks. There is no fee; we ask for one one-hour feedback call.

Request a review

Open source and the planned enterprise product

The collection, indexing, policy, scanning, gateway, and history-diff core is open source and self-hostable. SSO/SAML, RBAC, multi-tenancy, extended retention, signed audit exports, and SIEM integrations are product goals; they are not available today. What is available now is the open-source core and the free evidence review.