SourceVault Gateway

Local MCP gateway that gives coding agents governed, policy-checked access to private code, with redaction, an audit chain and provenance.

What you can do

• No tool list is published, so capabilities come from the description only.
• Gives a coding agent governed access to private source code, subject to policy checks.
• Applies redaction and records an audit chain for the access it mediates.
• Tracks provenance of the code and results the agent works with.
• Attributes calls to a named agent token so activity can be traced.

When to use it

Worth adding when a coding agent needs to read private repositories and you want policy enforcement, redaction and an auditable record of what it accessed, rather than giving the agent direct repository access.

Requirements

Runs as a local desktop process over stdio, installed from an mcpb package. A named agent token in SOURCEVAULT_AGENT_TOKEN, minted with the sourcevault agent mint command, is needed for attributed calls. SOURCEVAULT_STATE_DIR is only needed for a non-default install location.