The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
Connect Runs on your machine
claude mcp add zn-gate -e ZN_LOCAL_ONLY=<ZN_LOCAL_ONLY> -e ZN_CLOUD=<ZN_CLOUD> -e ZN_API_KEY=<ZN_API_KEY> -- npx -y [email protected]
{
"mcpServers": {
"zn-gate": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ZN_LOCAL_ONLY": "<ZN_LOCAL_ONLY>",
"ZN_CLOUD": "<ZN_CLOUD>",
"ZN_API_KEY": "<ZN_API_KEY>"
}
}
}
}
{
"mcpServers": {
"zn-gate": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ZN_LOCAL_ONLY": "<ZN_LOCAL_ONLY>",
"ZN_CLOUD": "<ZN_CLOUD>",
"ZN_API_KEY": "<ZN_API_KEY>"
}
}
}
}
{
"servers": {
"zn-gate": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ZN_LOCAL_ONLY": "<ZN_LOCAL_ONLY>",
"ZN_CLOUD": "<ZN_CLOUD>",
"ZN_API_KEY": "<ZN_API_KEY>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
ZN_LOCAL_ONLYOptional | Set to true to force local-only mode, even if ZN_CLOUD=1. |
ZN_CLOUDOptional | Set to 1 to let prompt analysis also query the optional cloud classifier. Off by default. |
ZN_API_KEYOptional, secret | API key for the optional cloud check. Has no effect without ZN_CLOUD=1. |
Details
| Package | [email protected] (NPM, stdio) |
| First published | 6 Nov 2026 |
| Last updated | 6 Nov 2026 |
| Registry name | io.github.usezn/zn-gate |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
