ThumbGate
Pre-action gates that block AI agents from repeating known mistakes.
Connector by IgorGanapolsky · GitHub account verified by the MCP Registry
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/igorganapolsky-thumbgate
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: agent-memory, security-scanning
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.
Runs code on install
Its package runs an install script (such as npm postinstall or setup.py code) as soon as you install it, before any tool is called. Read the script first.
- Tools
- 73 read · 39 write · 2 delete
- Secrets
- None asked for
- Install scripts
- Runs code on install
- Runs as
- Node.js package
Tools by what they do 114
Read from the source code; the running server may list different tools.
Read 73 · Look things up without changing anything.
ai_component_inventorycapture_feedbackcapture_memory_feedbackcheck_operational_integritycommerce_recallconstruct_context_packcontext_provenancecontext_stuff_lessonsdashboarddescribe_reliability_entitydescribe_semantic_entitydetect_noop
Show 61 more tools
diagnose_failureenforcement_matrixestimate_uncertaintyfeedback_statsfeedback_summaryfollower_growthgate_checkgate_statsgenerate_operator_artifactget_action_receiptsget_agent_outcome_metricsget_branch_governanceget_broker_execution_receiptsget_business_metricsget_imported_documentget_reliability_rulesget_scope_stateget_task_outcomesinfer_lesson_from_historylist_harnesseslist_human_escalationslist_imported_documentslist_intentslist_purchase_requisitionsorg_dashboardplan_agent_design_governanceplan_chatgpt_ads_readinessplan_context_footprintplan_intentplan_multimodal_retrievalplan_oss_pr_opportunity_scoutplan_proactive_agent_eval_guardrailsplan_reward_hacking_guardrailsprevention_rulesquery_social_metricsrecallreconcile_broker_receipt_chainreconcile_purchase_ledgerrequire_evidence_for_claimretrieve_lessonssearch_lessonssearch_thumbgatesecurity_scanself_distill_statussession_primersession_reportsession_searchsettings_statusskool_post_detailskool_read_communityskool_revenue_signalssocial_digestsuggest_fixthumbgate_get_pricing_summarythumbgate_get_product_overviewthumbgate_get_service_healthtop_social_contentunified_contextverify_broker_execution_receiptverify_claimworkflow_sentinel
Write 39 · Create, change, send or run things.
append_feedback_contextapprove_protected_actionbootstrap_internal_agentcomplete_handoffcreate_purchase_requisitiondistribute_context_to_agentsevaluate_context_packexport_databricks_bundleexport_dpo_pairsexport_hf_datasetfinalize_feedback_sessiongenerate_skill
Show 27 more tools
import_documentissue_broker_execution_receiptmanaged_agent_statusnative_messaging_auditopen_feedback_sessionparallel_workflowrecord_action_receiptrecord_broker_execution_receiptrecord_task_outcomereflect_on_feedbackregister_claim_gatereport_product_issuerequest_human_escalationreserve_purchase_requisitionrun_autoresearchrun_harnessrun_managed_lesson_agentrun_self_distillsatisfy_gatesession_handoffset_branch_governanceset_task_scopesettle_purchase_requisitionstart_handofftrack_actionuser_profilewebhook_deliver
Delete 2 · Delete, drop, revoke or wipe things.
execschedule
Network hosts it talks to 60
169.254.169.254· found in codeai-agent-blog-12345.hashnode.dev· found in codeaistudio.google.com· found in codeaiventyx.com· found in codealiexfantaisies.com· found in codeapi-m.paypal.com· found in codeapi.github.com· found in codeapi.openai.com· found in codeapi.openfinance.sh· found in codeapi.perplexity.ai· found in codeapi.stripe.com· found in codeapp.apollo.io· found in codeapple.com· found in codearxiv.org· found in codebsky.app· found in codebuildkite.com· found in codebuy.stripe.com· found in codechatgpt.com· found in codecheckout.stripe.com· found in codecloud.google.com· found in codecode.claude.com· found in codecursor.com· found in codedashscope-intl.aliyuncs.com· found in codedevblogs.microsoft.com· found in codedevelopers.openai.com· found in codedocs.typesafe.ai· found in codeevil.com· found in codeexplainx.ai· found in codegenerativelanguage.googleapis.com· found in codegithub.com· found in code
Show 30 more hosts
glama.ai· found in codegoogleapis.com· found in codegraph.facebook.com· found in codegraph.threads.net· found in codehn.algolia.com· found in codehuggingface.co· found in codeinfoq.com· found in codemcp.confidence.dev· found in codemcp.so· found in codemysiren.ai· found in codenews.ycombinator.com· found in codeoauth.reddit.com· found in codeomp.sh· found in codeopen.tiktokapis.com· found in codeopenai.com· found in codeopencode.ai· found in codepaypal.com· found in codeperplexity.ai· found in codeplausible.io· found in codereddit.com· found in codeskool.com· found in codesmithery.ai· found in codesupport.bolt.new· found in codethenewstack.io· found in codethumbgate-production.up.railway.app· found in codethumbgate.ai· found in codethumbgate.app· found in codethumbgate.invalid· found in codeunverified-agent.io· found in codezernio.com· found in code
Files it touches
/home/alice/.ssh/id_rsa~/.aws/credentials~/.ssh/id_ed25519~/.ssh/id_rsa/dev/stdin/dev/tcp/etc/etc/passwd/home/linuxbrew/.linuxbrew/bin/gh/home/redacted/opt/brave.com/brave/brave-browser/opt/google/chrome/chrome/opt/homebrew/bin/opt/homebrew/bin/gh/opt/homebrew/bin/git/opt/homebrew/bin/rg/opt/homebrew/bin/tailscale/opt/local/bin/gh/opt/microsoft/msedge/msedge/opt/vivaldi/vivaldi/proc/1/cgroup/root/tmp/repo/tmp/thumbgate-feedback/tmp/thumbgate-pipeline/tmp/thumbgate/jobs/runtime-proof.json/Users/iganapolsky/Documents/AI-Agent-Sync/Users/iganapolsky/workspace/ThumbGate/.thumbgate/omnichannel-attestation-ledger.jsonl/Users/iganapolsky/workspace/ThumbGate/.thumbgate/skool-replied-ledger.json/Users/igorganapolsky/workspace/git/igor/Resume/Users/igorganapolsky/workspace/git/igor/ThumbGate/.thumbgate/evidence/Users/redacted/Users/redacted/Library/LaunchAgents/com.igor.s.../usr/lib/x86_64-linux-gnu/opera/opera/usr/local/etc/config/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf/usr/share/fonts/truetype/dejavu/DejaVuSans.ttf/usr/share/fonts/truetype/dejavu/DejaVuSansMono.ttf/var/log/system.log- Your home directory (~)
Tools (114)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
ai_component_inventoryScan a project for AI/ML provider SDKs, agent frameworks, vector databases, Vertex/Gemini/Dialogflow CX usage, and model artifacts. Returns evidence suitable for enterprise AI inventory and ML-BOM review.
append_feedback_contextAppend a follow-up message to an open feedback session. Call this when the user types additional context after giving thumbs up/down.
approve_protected_actionGrant a time-limited approval for edits or publish actions that touch protected files.
bootstrap_internal_agentNormalize a GitHub/Slack/Linear trigger into startup context, construct a recall pack, prepare a git worktree sandbox, and emit an execution plus reviewer-lane plan.
capture_feedbackCapture an up/down signal plus one line of why. Vague feedback is logged, then returned with a clarification prompt instead of memory promotion.
capture_memory_feedbackCapture success/failure feedback to harden future workflows. Aliased to capture_feedback.
check_operational_integrityEvaluate whether the current repo state is safe for PR, merge, release, and publish operations.
commerce_recallRecall past feedback filtered by commerce categories (product_recommendation, brand_compliance, sizing, pricing, regulatory). Returns quality scores alongside memories for agentic commerce agents.
complete_handoffComplete a sequential delegation handoff and record verification outcomes
construct_context_packConstruct a bounded context pack from contextfs
context_provenanceGet recent context/provenance events
context_stuff_lessonsDump ALL prevention lessons into a single text block for context-window injection. Bypasses RAG/search — returns every lesson sorted by confidence. For most projects (20-200 lessons), fits in 1K-10K tokens.
create_purchase_requisitionCreate an append-only purchase requisition and independent human-escalation request. This does not authorize spending.
dashboardGet full ThumbGate dashboard -- Harness Score, gate stats, prevention impact, proof, and system health
describe_reliability_entityGet the definition and state of a business entity (Customer, Revenue, Funnel). Aliased to describe_semantic_entity.
Show 99 more tools
describe_semantic_entityGet the canonical definition and state of a business entity (Customer, Revenue, Funnel).
detect_noopDetect No-op ActionDetect whether a tool call was a no-op (state unchanged) or identical to a prior attempt in the session — a cheap repeat-loop signal. Records the action attempt state for repeat detection.
diagnose_failureDiagnose a failed or suspect workflow step using MCP schema, workflow, gate, and approval constraints.
distribute_context_to_agentsLeader-Agent swarm coordinator. Constructs one context pack and distributes it to N worker agents (perplexity-bug-resolver, codex-reviewer, grok-x-intelligence, etc.), recording provenance per agent. Replaces N independent context derivations with a single shared pack.
enforcement_matrixShow the full Enforcement Matrix: feedback pipeline stats, active pre-action checks, and rejection ledger with revival conditions.
estimate_uncertaintyEstimate Bayesian uncertainty for a set of tags based on past feedback.
evaluate_context_packRecord evaluation outcome for a context pack
execRun shell commands
export_databricks_bundleExport ThumbGate logs and proof artifacts as a Databricks-ready analytics bundle
export_dpo_pairsExport DPO preference pairs from local memory log
export_hf_datasetExport ThumbGate agent traces and DPO preference pairs as a HuggingFace-compatible dataset. Produces traces.jsonl, preferences.jsonl, and dataset_info.json with PII-redacted paths. Ready for huggingface-cli upload.
feedback_statsGet feedback stats and recommendations
feedback_summaryGet summary of recent feedback
finalize_feedback_sessionFinalize a feedback session and re-infer the lesson with all follow-up context.
follower_growthReturns follower count snapshots for a platform over the past N days.
gate_checkEvaluate a proposed tool call against ThumbGate policy BEFORE executing it. Returns decision "block" (do not run the action; surface the reason) or "allow". Use this when about to run a shell command, write/edit a file, or take any irreversible action.
gate_statsGet gate enforcement statistics -- blocked count, warned count, top gates
generate_operator_artifactDynamic operator artifact generator. Turns ThumbGate PR, reliability, revenue, and release data into a decision-ready pulse with metrics, evidence, and next actions.
generate_skillAuto-generate Claude skills from repeated feedback patterns. Clusters failure patterns by tags and produces SKILL.md files with DO/INSTEAD rules.
get_action_receiptsGet Action ReceiptsRead outcome-paired action receipts. Returns the receipt for a specific actionId, or the most recent receipts when no actionId is given.
get_agent_outcome_metricsGet Agent Outcome MetricsCompute transparent task, tool, safety, escalation, latency, cost, and business metrics from recorded task outcomes. Empty data returns insufficient_evidence.
get_branch_governanceReturn the active branch and release governance state.
get_broker_execution_receiptsGet Broker Execution ReceiptsRead recent broker-signed execution receipts from the local ledger.
get_business_metricsRetrieve high-level business metrics (Revenue, Conversion, Customers) from the Semantic Layer.
get_imported_documentRead a previously imported document with its proposed gate candidates and provenance.
get_reliability_rulesRetrieve active prevention rules and success patterns. Aliased to prevention_rules.
get_scope_stateReturn the active task scope and any unexpired protected-file approvals.
get_task_outcomesGet Task OutcomesRead a task outcome by taskId or the most recent evidence-backed outcome receipts.
import_documentImport a local policy or runbook document into ThumbGate, normalize it for search, and propose provenance-backed gate candidates.
infer_lesson_from_historyPerform autonomous inference on chat history to identify why a failure occurred and what rule should be recorded.
issue_broker_execution_receiptIssue Broker Execution Receipt (broker host only)Not available on the agent MCP surface. Brokers issue receipts out-of-band via scripts/broker-execution-receipts.js with THUMBGATE_BROKER_SIGNING_KEY.
list_harnessesList natural-language harness specs for portable workflow control, proof-backed verification, and GTM execution.
list_human_escalationsList Human EscalationsList auditable human-escalation state. Approval decisions are deliberately absent from the agent tool surface.
list_imported_documentsList imported policy and runbook documents stored in local ThumbGate state.
list_intentsList available intent plans and whether each requires human approval in the active profile
list_purchase_requisitionsList projected purchase-requisition states from the append-only financial ledger and human-review queue.
managed_agent_statusShow status of the last managed lesson agent run: entries processed, lessons created, gates promoted, and total runs.
native_messaging_auditAudit local browser native messaging hosts and AI browser bridges. Flags missing host binaries, pre-authorized extension bridges, and manifests for browsers not detected locally.
open_feedback_sessionOpen a feedback session after thumbs up/down. Follow-up messages will be captured for 60s.
org_dashboardOrg-wide multi-agent dashboard — shows all active agents, gate decisions, adherence rates, risk agents, and top blocked gates across the organization. Team rollout: full visibility. Free preview: limited to 3 agents.
parallel_workflowExecute a parallel, multi-step subtask workflow to resolve an objective like a security audit, performance benchmark, or repository inspection.
plan_agent_design_governanceEvaluate an agent workflow before adding tools, autonomy, or subagents. Recommends single-agent vs manager/decentralized patterns, baseline evals, instruction fixes, and tool safeguards.
plan_chatgpt_ads_readinessPrepare ThumbGate intent clusters, ad copy, proof links, UTM measurement, and launch gates for ChatGPT Ads Manager tests.
plan_context_footprintEstimate MCP schema and feedback-context footprint before loading large manifests into an agent prompt. Reports progressive-discovery savings, context compaction savings, and proof-preserving recommendations.
plan_intentGenerate an intent execution plan with policy checkpoints
plan_multimodal_retrievalPlan a high-ROI multimodal retrieval rollout for screenshots, PDF pages, dashboard captures, and proof artifacts without starting GPU training.
plan_oss_pr_opportunity_scoutRank upstream GitHub repositories ThumbGate depends on for proof-backed issue, bounty, and PR opportunities without spammy drive-by contributions.
plan_proactive_agent_eval_guardrailsMap proactive-assistant eval gaps to PARE-style state-machine, active-user-simulation, goal-inference, intervention-timing, and multi-app orchestration gates.
plan_reward_hacking_guardrailsDetect reward-hacking patterns such as unsupported completion claims, sycophancy, verbosity-as-proof, benchmark overfitting, evaluator manipulation, and proxy-only metrics.
prevention_rulesGenerate prevention rules from repeated mistake patterns
query_social_metricsReturns aggregated engagement metrics from the social analytics database for the given platform and time window.
recallRecall relevant past feedback, memories, and prevention rules for the current task. Call this at the start of any task to inject past learnings into the conversation.
reconcile_broker_receipt_chainReconcile Broker Receipt ChainVerify signatures and hash-chain continuity for all broker execution receipts on the ledger.
reconcile_purchase_ledgerReconcile the append-only financial ledger, including totals, stale reservations, status counts, and tamper-evident event hashes.
record_action_receiptRecord Action ReceiptPair a tracked tool call with its outcome (diff, exit code, test result) so a promoted lesson encodes "this action -> this outcome", not just a thumbs signal. Appends to the action-receipts log.
record_broker_execution_receiptRecord Broker Execution ReceiptAppend a verified broker-signed execution receipt to the local hash-chained ledger.
record_task_outcomeRecord Verified Task OutcomeRecord an idempotent task-level outcome with verification evidence, tool correctness, policy behavior, latency, cost, and business KPI movement. A completed response without evidence is recorded as not working.
reflect_on_feedbackRun a post-mortem analysis on negative feedback. Returns a proposed rule and recurrence info.
register_claim_gateRegister a custom claim verification rule in local runtime state without editing tracked repo config.
report_product_issueReport a bug, suggestion, or complaint about ThumbGate itself (not project feedback). Auto-files a GitHub issue with system context. Use when the user expresses frustration or requests a feature for the thumbgate tool.
request_human_escalationRequest Human EscalationCreate an idempotent, expiring human-review request with requester identity and evidence. Agents cannot approve their own requests.
require_evidence_for_claimLeader-Agent completion gate. Before any agent declares done/fixed/shipped/resolved, require tracked session evidence AND recheck parseable factual claims (row counts, file metrics, versions) against configured verifiers. Blocking response when evidence is missing or a factual claim mismatches; callers honor the blocking flag to stop completion claims.
reserve_purchase_requisitionReserve a single-use amount from an independently approved purchase requisition. Approval is unavailable from the agent tool surface.
retrieve_lessonsRetrieve the most relevant lessons for a given tool/action context. Use in PreToolUse hooks for per-action guidance.
run_autoresearchRun a bounded metric-improvement loop: measure a baseline, test a hypothesis, require primary and holdout checks, then keep or discard the candidate mutation with proof.
run_harnessExecute a natural-language harness through the async job runner with checkpoints, verification, and proof-backed outcomes.
run_managed_lesson_agentRun the LLM-powered lesson inference and rule generation agent over accumulated feedback. Requires ANTHROPIC_API_KEY for LLM mode; falls back to heuristics if unavailable.
run_self_distillRun the self-distillation agent to auto-evaluate recent agent sessions and generate improvement lessons without human feedback. Reads conversation logs, detects success/failure signals, and persists lessons.
satisfy_gateSatisfy a gate condition with optional structured reasoning. Evidence is stored with a 5-minute TTL. When structuredReasoning is provided, the premise/evidence/conclusion chain is stored in the audit trail.
scheduleCreate, list, or delete scheduled tasks. Supports natural language scheduling like "daily 9:00", "weekly monday 8:30", "hourly". Installs as macOS LaunchAgent or Linux crontab.
search_lessonsSearch promoted lessons and show the corrective actions, lifecycle state, prevention rules, gates, and next harness fixes linked to each result.
search_thumbgateSearch raw ThumbGate state across feedback logs, ContextFS memory, prevention rules, and imported policy documents.
security_scanScan code for OWASP vulnerabilities (injection, XSS, path traversal, SSRF, prototype pollution) and supply chain risks (typosquatting, install script abuse, wildcard versions). Returns findings with severity, category, and line numbers.
self_distill_statusShow status of the last self-distillation run: sessions analyzed, lessons generated, signals detected.
session_handoffWrite a session handoff primer that auto-captures git state (branch, last 5 commits, modified files), last completed task, next step, and blockers. The next session reads this automatically for seamless context continuity.
session_primerRead the most recent session handoff primer to restore context from the previous session. Call at session start.
session_reportUnified observability rollup. Aggregates feedback stats, gate stats, and recent context/provenance events over a time window in one call. Replaces separate dashboard/gate_stats/feedback_stats calls with a single LangSmith-style report.
session_searchSearch past session notes and conversations using full-text search. Returns relevant sessions from the SQLite FTS5 index for cross-session recall.
set_branch_governanceDeclare or clear branch and release governance so PR, merge, release, and publish actions can be evaluated against explicit workflow state.
set_task_scopeDeclare or clear the current task scope so ThumbGate can compare affected files and diffs against the approved path set.
settings_statusResolve managed, user, project, and local ThumbGate settings with per-field origin metadata for policy visibility.
settle_purchase_requisitionCommit actual spend with receipt evidence or release an unused reservation. Events are append-only.
skool_post_detailread-onlyRead a single Skool post URL headlessly and return normalized post metadata and content when available. Read-only.
skool_read_communityread-onlyRead a Skool community page headlessly and return normalized categories, posts, and engagement metadata. Read-only.
skool_revenue_signalsread-onlyRank Skool posts for ThumbGate acquisition opportunities, pain points, and high-intent outreach angles. Read-only.
social_digestReturns a full digest object summarising all social metrics, follower deltas, and top content for the past N days.
start_handoffStart a sequential delegation handoff from a delegation-eligible intent plan
suggest_fixSuggest corrective actions for a described failure by searching the lesson DB and prevention rules. Returns up to 3 ranked suggestions with their source. Call this when something goes wrong and you need guidance on what to do next.
thumbgate_get_pricing_summaryread-onlyRead-only pointer to ThumbGate plans. Does not start any purchase; buying always requires a human on the pricing page.
thumbgate_get_product_overviewread-onlyWhat ThumbGate is: an infrastructure firewall for AI coding agents. Captures feedback, promotes it to memory, generates prevention rules, and blocks known-bad tool calls via PreToolUse hooks. Returns the install command and key links.
thumbgate_get_service_healthread-onlyRead-only live health of the hosted ThumbGate service: status, version, build.
top_social_contentReturns top content items ranked by total engagement (likes + comments + shares + saves) over the past N days.
track_actionRecord a verification action in the current session (for example figma_verified or tests_passed). Session actions expire after one hour.
unified_contextAssemble a complete, role-aware context object in one call. Combines session state, user profile, relevant lessons, prevention guards, context pack, and code-graph impact — with tiered graceful degradation (full → warm → cold). Replaces multiple recall/retrieve/session_primer calls with a single orchestrated request.
user_profileManage persistent user profile — preferences, style, domain knowledge that persists across sessions. Actions: add, remove, replace, view.
verify_broker_execution_receiptVerify Broker Execution ReceiptVerify a broker-signed execution receipt (Ed25519). Rejects agent-minted or rewritten "proof". ThumbGate verifies; the broker holds provider credentials and signs.
verify_claimCheck whether a claim has enough tracked evidence and, for parseable factual claims (row counts, file lines/bytes/existence, versions), recheck configured SQLite/filesystem/JSON verifiers before the agent asserts it.
webhook_deliverSend a message to Teams, Slack, or Discord via webhook. Use for status reports, alerts, and notifications.
workflow_sentinelPredict pre-action workflow risk, blast radius, and remediations before a tool call executes.
Signals
- Stars
- 29
- Forks
- 7
- Open issues
- 0
- Contributors
- 5
- Last commit
- Oct 23, 2026 (5 days ago)
- Last release
- Oct 22, 2026 (6 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
io.github.IgorGanapolsky/thumbgate- Version
- 1.27.17
- Auth
- No auth
- Packages
- npm thumbgate
- License
- MIT
- Repository
- github.com/IgorGanapolsky/ThumbGate
- Website
- thumbgate.ai
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
More from IgorGanapolsky
Cite this page
ThumbGate MCP server. Agent Mart. https://agentmart.dev/connectors/igorganapolsky-thumbgate (last updated 2026-10-24)