Agent Gate

com.forgeorbitalPublished by forgeorbital.comv0.1.5Updated Oct 24, 2026

Local mandate gate and proof trail for AI agents that take consequential actions.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

A local stdio gate that checks an AI agent's consequential actions against a signed mandate and records a proof trail before writes proceed.

What you can do
  • Gate agent actions against a signed mandate policy loaded from a local file, blocking writes that fall outside it.
  • Record each gated action into a Forge proof trail stamped with a tenant id, failing closed or best-effort depending on record mode.
  • Halt all gated writes instantly when a designated kill-switch file exists.
  • Optionally route actions through a live Kalshi venue adapter using a local API key id and RSA private key.
  • Initialize a mandate file through the package's own init command.
When to use it
Use it when an assistant or agent performs consequential, state-changing actions and you want a local policy check plus an auditable record before those actions go through. It suits teams that already use Forge for decision records or want a hard stop switch for agent writes.
Requirements
Runs locally over stdio via npx from the npm package forge-agent-gate, on desktop only. Needs a signed mandate JSON at an absolute path (created with the init command) and a Forge tenant id. Requires either FORGE_API_KEY or FORGE_BEARER_TOKEN for the Forge decision API, plus network access to it unless FORGE_API_BASE_URL points elsewhere. The optional Kalshi adapter needs KALSHI_API_KEY_ID, KALSHI_ENV and KALSHI_PRIVATE_KEY_PATH.
Before you install
It handles secrets: FORGE_API_KEY or FORGE_BEARER_TOKEN, and for the Kalshi adapter KALSHI_API_KEY_ID plus a path to an RSA private key. Gated actions are sent to the Forge decision API, which defaults to the hosted cloud, so action details leave your machine unless you point FORGE_API_BASE_URL elsewhere. With FORGE_RECORD_MODE set to best_effort, actions execute even when recording fails; required is the fail-closed option. The Kalshi adapter can place live trades when KALSHI_ENV is prod.

Installation

In SourceWeft

  1. Open Agent Gate in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.5LatestSep 16, 2026

Score

25% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.