Governed MCP Gateway

Install

Pick your client. Read the repository before you give any tool access to your data.

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

3 read · 1 write · 0 delete · 1 not yet classified

Secrets

None asked for

Install scripts

Not scanned yet

Runs as

Node.js package

Tools (5)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• context.inspect

  Read the current session pack and schema token-tax report for the authenticated principal. Returns the bytes→tokens heuristic, session tool names, savedTokens versus the full allowlist, and (unless includeEstate=false) the estate including oversized flags. Does not admit tools and does not execute other tools. Call this before context.need to see what is already loaded. Fail-closed: requires the same principal as the session.

• context.need

  Admit extra tools or a named pack into this session (allow-by-need). Always intersected with the principal allowlist — fail-closed. Research cannot admit stripe.charge. Does not run the admitted tools; call tools/list afterwards to see the new pack, or context.inspect to see tax. sessionId defaults to ses_<principalId>. Denied names are returned in denied[] and recorded on the ledger.

• echo.ping

  Identity probe. Echoes the call arguments and the authenticated Principal the gateway injected onto this tools/call (id, kind, org). Use it to confirm Bearer identity survived onto the tool worker. Does not hit a network, mutate vault state, or charge. Idempotent except for an audit-ledger append. Not a substitute for context.inspect.

• search.web

  Governed web-search stub for the research principal. Returns an empty hits array plus the query and Principal. Does not call a live search API. Not on the PayOps allowlist or the default session pack — admit with context.need (pack=research) when the caller is allowlisted. Use echo.ping to test identity; use this only when you need a research-shaped tool.

• stripe.charge

  Simulated payment tool. amountCents is integer cents. Under the demo auto-cap this returns a simulated charge plus the Principal; it never calls live Stripe. Not on the default tools/list pack — admit it with context.need (pack=payments) first. Research principals are denied JSON-RPC -32001. Over cap the gateway returns pending_human instead of charging. Optional spend-plane hook runs only when SPEND_PLANE_URL is set and amountCents > 0.

Signals

Stars

0

Forks

0

Open issues

1

Weekly downloads

9

Last commit

Sep 8, 2026 (1 month ago)

Last release

Aug 22, 2026 (2 months ago)

Last package publish

Aug 22, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.icohangar-ops/governed-mcp-gateway

Version

0.1.0

Auth

No auth

Packages

npm @cubiczan/governed-mcp-gateway

License

MIT

Repository

github.com/icohangar-ops/governed-mcp-gateway

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql