NestDaddy

Gatekeeper

io.github.Runestone-Labs/gatekeeper · v0.1.2

Run MCP tool calls through Runestone Gatekeeper — policy enforcement, human approval, audit.

Connect Runs on your machine

Terminal
claude mcp add gatekeeper -e GATEKEEPER_ROLE=<GATEKEEPER_ROLE> -e GATEKEEPER_URL=<GATEKEEPER_URL> -e GATEKEEPER_AGENT_NAME=<GATEKEEPER_AGENT_NAME> -e GATEKEEPER_RUN_ID=<GATEKEEPER_RUN_ID> -- npx -y @runestone-labs/[email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "gatekeeper": {
      "command": "npx",
      "args": [
        "-y",
        "@runestone-labs/[email protected]"
      ],
      "env": {
        "GATEKEEPER_ROLE": "<GATEKEEPER_ROLE>",
        "GATEKEEPER_URL": "<GATEKEEPER_URL>",
        "GATEKEEPER_AGENT_NAME": "<GATEKEEPER_AGENT_NAME>",
        "GATEKEEPER_RUN_ID": "<GATEKEEPER_RUN_ID>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "gatekeeper": {
      "command": "npx",
      "args": [
        "-y",
        "@runestone-labs/[email protected]"
      ],
      "env": {
        "GATEKEEPER_ROLE": "<GATEKEEPER_ROLE>",
        "GATEKEEPER_URL": "<GATEKEEPER_URL>",
        "GATEKEEPER_AGENT_NAME": "<GATEKEEPER_AGENT_NAME>",
        "GATEKEEPER_RUN_ID": "<GATEKEEPER_RUN_ID>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "gatekeeper": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@runestone-labs/[email protected]"
      ],
      "env": {
        "GATEKEEPER_ROLE": "<GATEKEEPER_ROLE>",
        "GATEKEEPER_URL": "<GATEKEEPER_URL>",
        "GATEKEEPER_AGENT_NAME": "<GATEKEEPER_AGENT_NAME>",
        "GATEKEEPER_RUN_ID": "<GATEKEEPER_RUN_ID>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
GATEKEEPER_ROLE
Required
Policy role this server presents to Gatekeeper for every call. Required.
GATEKEEPER_URL
Optional
Base URL of the Gatekeeper server. Default http://127.0.0.1:3847.
GATEKEEPER_AGENT_NAME
Optional
Agent name recorded in Gatekeeper audit logs. Default mcp-client.
GATEKEEPER_RUN_ID
Optional
Optional run-correlation id so calls count toward one per-run budget.

Details

Package@runestone-labs/[email protected] (NPM, stdio)
First published5 Sep 2026
Last updated5 Sep 2026
Registry nameio.github.Runestone-Labs/gatekeeper

More other servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.