Policy Gatekeeper

MCP server for enforcing organizational policies on AI agents - validates commands, file operations, and code changes in real-time before execution

python

0

GitHub Stars

python

Language

7 months ago

First Indexed

3 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "gilsmon-mcpserver_as_gatekeeper": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/mcpServer_as_gatekeeper",
        "run",
        "server.py"
      ]
    }
  }
}

You are using a Policy Gatekeeper MCP server that validates every action from AI coding agents in real time. It enforces naming conventions, security and compliance rules, and keeps your code and workflows aligned with organizational policies before any action executes.

How to use

Use an MCP client to route agent actions through the Policy Gatekeeper. The gatekeeper inspects each command or action, applies naming and security policies, and either allows the action to proceed or denies it with a clear policy violation message. You can integrate this with Windsurf or any client that supports the MCP protocol to achieve real-time policy enforcement.

How to install

Prerequisites: you should have Python and a supported runtime for the MCP server tooling installed on your machine.

Clone the MCP server repository and set it up locally.
Install the MCP server runtime tooling (example uses the uv runner and a Python server script).
Run the MCP server for policy enforcement.

Additional sections

Configuration and runtime details below show how to wire the gatekeeper into your developer tooling, how to customize policies, and what you can expect in terms of outcomes.

Available tools

Command validation

Verifies commands and prevents dangerous or destructive operations from executing (e.g., rm -rf /, curl | bash, chmod 777).

File naming enforcement

Ensures file names follow snake_case conventions and rejects camelCase, kebab-case, and special characters.

Audit logging

Keeps a trace of all actions and policy decisions for accountability and review.

Dashboard statistics (built-in)

Provides a statistics view of policy checks and outcomes to understand coverage and impact.