Skip to content
Agentmart
Submit a tool

Odile Gate

Free, no signup: your agent puts each app on its own key, allowed calls, approvals and an audit log.

Connector by odilelabs.com · Domain verified by the MCP Registry

IndexedLicense unknownRemote (HTTP)
Write a review

Install

Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install connector/odilelabs-com-gate

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoint

  • https://gate.odilelabs.com/mcp Remote (HTTP)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Free, no signup: your agent puts each app on its own key, allowed calls, approvals and an audit log.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
13 read · 8 write · 0 delete
Secrets
None asked for
Install scripts
Nothing to install (hosted)
Runs as
Hosted (remote endpoint)

Tools by what they do 21

From the running server's own tool list (tools/list) on Oct 25, 2026.

Read 13 · Look things up without changing anything.

  • gate_audit
  • gate_audit_proof
  • gate_audit_verify
  • gate_check_setup
  • gate_explain_refusal
  • gate_learn_suggestions
  • gate_list_actions
  • gate_list_apps
  • gate_metrics
  • gate_openshell_setup
  • gate_run_timeline
  • gate_run_tree
Show 1 more tools
  • gate_validate_config

Write 8 · Create, change, send or run things.

  • gate_add_app
  • gate_add_approver
  • gate_create_project
  • gate_create_run
  • gate_delegate_run
  • gate_set_app_runs
  • gate_set_response
  • gate_sync_declarative

Network hosts it talks to 1

  • gate.odilelabs.com · found in remote endpoint, install command

Tools (21)

As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • gate_add_appRegister an app

    Give one app its own key and the calls it may make. Routes are rules like "GET /orders/:id", "POST /orders", "GET /users/{user}/orders" (per-user), or example calls like "GET /orders/42", which become rules allowing any id. Returns key (shown once), app.id and normalized rules. Send key as Authorization: Bearer <key> to the project gateway; never send the admin key to the workload.

  • gate_add_approverAdd an approver

    Create an approver key for the person who approves held actions (shown once). Give it to that person, never to an agent: once a project has an approver, the admin key can no longer approve.

  • gate_auditRead the audit logread-only

    The most recent calls through the gateway (time, app, matched route, status, reason, duration), newest first, with totals by status and refusal reason. Gate never stores bodies, query values or headers.

  • gate_audit_proofExport a signed audit proofread-only

    Read chained audit rows, decided-action feature snapshots and anchors with an HMAC-SHA256 signature. No sealed paths/bodies, notes, keys or IPs in the action labels. Legacy actions lack snapshots and are excluded. store_audit=false has no chain. Follow next_from for audit rows and next_actions_after as actions_after for labels (10,000 each). Use API/SDK above the MCP response size limit.

  • gate_audit_verifyVerify a signed audit exportread-only

    Recompute a pasted export chain and project signature; returns intact or broken_at (one-based row position). Does not approve actions or change permissions.

  • gate_check_setupCheck an agent integration setupread-only

    Read actual Gate protection settings before giving an integration production access. Reports observe-only mode, writes without mandatory runs, missing user-token configuration, wildcard grants and approval separation, with evidence, exact remedies and explicit limits. Sends no upstream requests, changes no settings and uses no gateway quota. Configuration-only: not a security certificate or runtime enforcement test.

  • gate_create_projectCreate a Gate project

    Create a Free project in front of an existing HTTPS API. No signup or payment required. For a credential-free demo use https://sandbox.gate.odilelabs.com with GET /customers/:cid/tickets/:id. Returns project_id, admin_key (shown once) and the gateway base URL apps call instead of the API. A real API and its credentials need owner authorization.

  • gate_create_runGrant one agent run

    Gate Actions: give one agent session narrow, expiring permission. Actions are rules with {placeholders} bound by scope (e.g. "PATCH /customers/{customer}/tickets/:id" with scope {"customer":"A"}), each with an optional max and approval. Returns a run token (shown once) the agent sends as x-odile-run with its app key. Writes in a run need an Idempotency-Key. Give a write a check ("GET /bookings?idempotency_key={key}") and the agent can settle a lost answer with POST /g/<id>/_gate/recover.

  • gate_delegate_runDelegate a narrower run

    Hand a narrower run to another active app in the same project. Uses the parent app key and run token, never the admin key. Scope, expiry, approvals and ancestor budgets stay enforced; maximum depth five.

  • gate_explain_refusalExplain a refused callread-only

    What a Gate refusal means and how to fix it, from the x-gate-refused header value (e.g. route_not_allowed).

  • gate_learn_suggestionsRead learning suggestionsread-only

    Read normalized routes and a suggested per-minute limit from an admin-enabled, time-boxed learning session. Records only method, normalized path templates and counts per minute; no query values, raw ids, headers or bodies. Never enables learning or applies rules.

  • gate_list_actionsList held actionsread-only

    Actions waiting for approval (or in another state), with the exact call. With an installed approval-risk model, pending actions sort by risk descending and include risk (0–1) and risk_features (top two advisory signals). No model means no score and newest first. Only a person decides in the dashboard.

  • gate_list_appsList appsread-only

    The project's apps with their allowed calls, limits, state and anomaly-guard settings.

  • gate_metricsRead Gate operational metricsread-only

    Read last-24-hour stored call counts by HTTP status and reason, measured duration through response headers (including upstream wait), per-app anomaly scores and 24-hour anomaly counts, and separate current-month gateway usage: plan, used, allowed, plus upgrade URL and checkout path on Free at 80% or above. Only POST the checkout path when the admin asks to upgrade; reading metrics never starts checkout. Project admin only. Audit may be partial: invalid-key sampling and audit-off periods are disclosed. No upstream requests, quota use or policy changes; not a health certificate or performance gu…

  • gate_openshell_setupDiscover one-command OpenShell setupread-only

    Read-only local setup plan for native OpenShell + Gate: one command, exact installer hash, recipe schema, prerequisites, authority boundaries and cleanup. Default creates an isolated Free read-only demo with no model or payment. A trusted local controller may configure an owner-authorized API with explicit routes/scope and private credential files. This tool does not run commands, create resources or accept credentials.

Show 6 more tools
  • gate_run_timelineRead run timelineread-only

    Read call metadata, approvals and approver names, recovery outcomes and delegated children; no bodies or query values.

  • gate_run_treeRead run treeread-only

    Read a run and its delegated descendants without tokens.

  • gate_set_app_runsRequire runs for an app

    Make an app need a run: "writes" (every write needs x-odile-run), "all" (every call), or "off".

  • gate_set_responseChoose response fields for an app

    Opt-in JSON response redaction: return only explicit JSON Pointer paths, e.g. /id and /items/*/name. * matches one segment; selecting a container allows its whole subtree. Applies to every upstream response for this app, including errors. Maximum 1 MiB and 5 seconds to read; invalid/non-JSON responses are withheld. No bodies are stored. A withheld reply never reverses an upstream write. null disables filtering. Free and Pro.

  • gate_sync_declarativeApply an odile.yaml

    Make a Gate project match an odile.yaml: creates the project (if no project_id) and missing apps and approvers, applies run mode, loop, learning and anomaly-guard settings and alerts. Example plugin: {name: anomaly-guard, settings: {mode: alert, z_threshold: 4, min_minutes: 3, half_life: 60}}. Never revokes or deletes; differences it cannot apply (an app's routes or rate limit) come back as drift. dry_run lists the steps without changing anything. New keys are shown once.

  • gate_validate_configCheck an odile.yamlread-only

    Parse and check a declarative Gate config (apps, routes, rate limits, run mode, plugins including anomaly-guard, alerts, approvers) without changing anything. anomaly-guard settings: mode off|alert|strict, z_threshold 2–10, min_minutes 1–30, half_life 5–1440. Returns errors with their path, warnings, and the normalized config.

Signals

Last release
Oct 26, 2026 (3 days ago)

Details

Registry name
com.odilelabs/gate
Version
1.6.1
Auth
Auth not stated
License
License unknown
Website
gate.odilelabs.com/
First seen
Oct 24, 2026
Last checked
Oct 26, 2026
Source
Official MCP Registry

More from odilelabs.com

Cite this page

Odile Gate MCP server. Agent Mart. https://agentmart.dev/connectors/odilelabs-com-gate (last updated 2026-10-26)