Agent Gate
com.forgeorbitalPublished by forgeorbital.comv0.1.5Updated Oct 24, 2026
Local mandate gate and proof trail for AI agents that take consequential actions.
Overview
A local stdio gate that checks an AI agent's consequential actions against a signed mandate and records a proof trail before writes proceed.
- What you can do
- Gate agent actions against a signed mandate policy loaded from a local file, blocking writes that fall outside it.
- Record each gated action into a Forge proof trail stamped with a tenant id, failing closed or best-effort depending on record mode.
- Halt all gated writes instantly when a designated kill-switch file exists.
- Optionally route actions through a live Kalshi venue adapter using a local API key id and RSA private key.
- Initialize a mandate file through the package's own init command.
- When to use it
- Use it when an assistant or agent performs consequential, state-changing actions and you want a local policy check plus an auditable record before those actions go through. It suits teams that already use Forge for decision records or want a hard stop switch for agent writes.
- Requirements
- Runs locally over stdio via npx from the npm package forge-agent-gate, on desktop only. Needs a signed mandate JSON at an absolute path (created with the init command) and a Forge tenant id. Requires either FORGE_API_KEY or FORGE_BEARER_TOKEN for the Forge decision API, plus network access to it unless FORGE_API_BASE_URL points elsewhere. The optional Kalshi adapter needs KALSHI_API_KEY_ID, KALSHI_ENV and KALSHI_PRIVATE_KEY_PATH.
Installation
In SourceWeft
- Open Agent Gate in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Tools
0Version history
1- v0.1.5LatestSep 16, 2026
Score
25% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
- License10 pts
Declare a license in the repository or the registry entry.