CategoryWeightCategory scoreContribution
Securityprompt, exec, net, exfil, eval
35%
35.0 pts
Supply chainhash, typosquat, maintainer, lockfile
20%
20.0 pts
Maintenancestaleness, pinning, CI
15%
15.0 pts
TransparencySKILL.md, perms, README
15%
15.0 pts
Communityinstalls, verify, response
15%
15.0 pts
Findings & checks · 0 flagged
Security
✓—All security checks passedNo findings in this category for the latest scan.pass
Supply chain
✓—All supply chain checks passedNo findings in this category for the latest scan.pass
Maintenance
✓—All maintenance checks passedNo findings in this category for the latest scan.pass
Transparency
✓—All transparency checks passedNo findings in this category for the latest scan.pass
Community
✓—All community checks passedNo findings in this category for the latest scan.pass
Every scanned point with the score it earned and what moved between them.
9a652d3
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
arc-gate-mcp
Runtime governance proxy for MCP tool calls. Blocks prompt injection and capability abuse before tool results reach your agent.
What it does
arc-gate-mcp sits between your MCP client and any MCP server. Every tool result passes through Arc Gate governance before reaching your agent — blocking prompt injection attacks that exploit the MCP trust boundary.
Installation
pip install arc-gate-mcpUsage
arc-gate-mcp --upstream "uvx mcp-server-fetch" --policy balancedWith Claude Desktop
{
"mcpServers": {
"arc-gate": {
"command": "uvx",
"args": ["arc-gate-mcp", "--upstream", "uvx mcp-server-fetch", "--policy", "browser_agent"]
}
}
}Policy modes
balanced— general purposebrowser_agent— web browsing agentsfinance_agent— financial data agentsrag_assistant— document retrieval agentsstrict— maximum enforcement
Links
License
AGPL-3.0
Used with Heym
arc-gate-mcp is available as a template on Heym — an enterprise agent platform. Try the Governed Web Research Agent template to see Arc Gate MCP in action.