NestDaddy

Zn Gate

io.github.usezn/zn-gate ยท v1.15.0

The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.

Connect Runs on your machine

Terminal
claude mcp add zn-gate -e ZN_LOCAL_ONLY=<ZN_LOCAL_ONLY> -e ZN_CLOUD=<ZN_CLOUD> -e ZN_API_KEY=<ZN_API_KEY> -- npx -y [email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "zn-gate": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ZN_LOCAL_ONLY": "<ZN_LOCAL_ONLY>",
        "ZN_CLOUD": "<ZN_CLOUD>",
        "ZN_API_KEY": "<ZN_API_KEY>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "zn-gate": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ZN_LOCAL_ONLY": "<ZN_LOCAL_ONLY>",
        "ZN_CLOUD": "<ZN_CLOUD>",
        "ZN_API_KEY": "<ZN_API_KEY>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "zn-gate": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ZN_LOCAL_ONLY": "<ZN_LOCAL_ONLY>",
        "ZN_CLOUD": "<ZN_CLOUD>",
        "ZN_API_KEY": "<ZN_API_KEY>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
ZN_LOCAL_ONLY
Optional
Set to true to force local-only mode, even if ZN_CLOUD=1.
ZN_CLOUD
Optional
Set to 1 to let prompt analysis also query the optional cloud classifier. Off by default.
ZN_API_KEY
Optional, secret
API key for the optional cloud check. Has no effect without ZN_CLOUD=1.

Details

Package[email protected] (NPM, stdio)
First published6 Nov 2026
Last updated6 Nov 2026
Registry nameio.github.usezn/zn-gate

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.