Community project / Agent and developer tooling

toolgate

MIT TypeScript tool-call firewall for Claude Code (PreToolUse hook) and MCP servers (stdio proxy): static rules first, then seven Jev Noul risk questions per action mapped to allow, ask, or deny by policy thresholds, with an action ledger, key-aware redaction, and a local JSONL audit log. Sends redacted tool input, cwd, and recent prompts to TypeSafe, OpenRouter, or Vercel AI Gateway (owner's key); in one author's 1,369-decision window on 0.9.1, blind second labeling of 150 sampled allows found no permissive misses, while 21% of decisions required an ask, mostly from one axis. Version 0.11.0 addresses that axis but has not been re-measured. Heuristic redaction and model judgments are defense in depth, not a sandbox.

Open the original resource ↗ See it in the full directory Start a reading list → Browse all Agent and developer tooling

Download share card ↓

This is an independent community listing. Check the source, license, data handling, and evaluation caveats before relying on a project. Inclusion is not an endorsement or security review.

Found an outdated or inaccurate detail? Report a correction →

Explore more in Agent and developer tooling

• 

  TypeSafe MCP

  Go CLI and single-binary MCP server with setup for Claude Desktop, Claude Code, and Codex.

  Read listing →
• 

  Vercel Eve

  Agent framework whose auto model router defaults to Jev through Vercel AI Gateway and whose evaluate helper asks typed Choice, Score, and Boolean questions inside tools; the underlying AI SDK evaluation model specification is experimental, and the caller owns routing and effects.

  Read listing →
• 

  VexJoy Agent

  Cross-harness coding-agent toolkit whose /d path uses up to two Jev evaluations to select agents, skills, and a pipeline, then checks the proposed intent before dispatch; deterministic force-route rules bypass Jev. Request text goes to TypeSafe or Vercel AI Gateway, and the installer changes local agent configuration and hooks.

  Read listing →