Gatewerk

io.github.gatewerkPublished by GitHub account gatewerkv1.1.4Updated Oct 25, 2026

The open-source review layer for AI agents. Work done for humans is decided by humans.

Overview

AI-generated overview

A local MCP server that connects an AI assistant to a Gatewerk review instance so it can create, read and decide human reviews.

What you can do
Create, list and fetch reviews, and take configurable approve, reject, edit or retry actions on them, including listing a review's available actions and chain context. List, create, update and delete review templates, and start multi-step review chain runs. Post and list notes, optionally pinned to reviews, templates or chain runs. Query past decisions, the audit trail and review metrics with daily trends.
When to use it
Useful when a team runs Gatewerk, cloud or self-hosted, as a human review layer for AI agent output and wants assistants to file review requests, act on the review inbox, or learn from past decisions without leaving the chat client.
Requirements
Runs locally via npx (Node.js). Needs a Gatewerk API key in GATEWERK_API_KEY with the scopes for the tools you want; tools are filtered by those scopes. GATEWERK_URL sets the instance base URL and defaults to a local address. GATEWERK_REVIEWER optionally attributes decisions to a reviewer email. Network access to the Gatewerk instance.
Before you install
The API key is a secret and its scopes decide what the assistant can do; an admin-scope key exposes the full surface. Decision tools approve, reject or retry reviews, and template tools create, update and delete templates, so changes are written to the instance. Decisions may be attributed to the identity in GATEWERK_REVIEWER rather than the key owner.

Installation

In SourceWeft

  1. Open Gatewerk in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@gatewerk/mcp

The Gatewerk MCP server lets AI agents read and decide reviews from inside Claude Desktop, Claude Code, Cursor, Windsurf, or any Model Context Protocol client. It exposes Gatewerk's review/template/feedback/audit/chain/note APIs as MCP tools, scoped to whatever permissions the API key carries.

Gatewerk is an open-source, self-hosted review layer for AI agents. Work done for humans is decided by humans.

Quickstart

bash
npx @gatewerk/mcp init

The init command prompts for your Gatewerk URL, API key, and (optionally) reviewer email, then prints a config block you paste into your MCP client's settings.

You can also write the config by hand:

json
{  "mcpServers": {    "gatewerk": {      "command": "npx",      "args": ["-y", "@gatewerk/[email protected]"],      "env": {        "GATEWERK_URL": "https://api.gatewerk.com",        "GATEWERK_API_KEY": "gwk_...",        "GATEWERK_REVIEWER": "[email protected]"      }    }  }}

GATEWERK_REVIEWER is optional — when set, decisions made through the MCP server are attributed to that reviewer. Otherwise the API key's identity is used.

Available tools

Tools are filtered automatically based on the scopes attached to your API key. A key with only reviews:read will not see gatewerk_decide_review.

Reviews

  • gatewerk_create_review — submit a new review request (scope: reviews:create)
  • gatewerk_list_reviews — list reviews with filters (scope: reviews:read)
  • gatewerk_get_review — fetch a review with its template metadata (scope: reviews:read)
  • gatewerk_decide_review — approve / reject / edit / retry a review [deprecated; prefer gatewerk_take_review_action] (scope: reviews:decide)
  • gatewerk_take_review_action — invoke a configurable action on a review; supports built-in and template-specific action IDs (scope: reviews:decide)
  • gatewerk_list_review_actions — introspect the available actions on a review's template (scope: reviews:read)

Templates

  • gatewerk_list_templates — list templates (scope: templates:read)
  • gatewerk_create_template — define a template (scope: templates:write)
  • gatewerk_update_template — modify a template (scope: templates:write)
  • gatewerk_delete_template — remove a template (scope: templates:write)

Chains

  • gatewerk_start_chain_run — start a multi-step review chain from a definition (scope: templates:write)
  • gatewerk_get_chain_run — fetch a chain run + steps by ID (scope: reviews:read)
  • gatewerk_get_chain_for_review — get chain context for a review (scope: reviews:read)

Notes

  • gatewerk_create_note — post a note, optionally pinned to one or more reviews/templates/chain runs (scope: notes:write)
  • gatewerk_list_notes — list notes with filters (author, tags, target, shared/private) (scope: notes:read)

Queries + stats

  • gatewerk_query_feedback — query past decisions for learning (scope: feedback:read)
  • gatewerk_query_audit — query the audit trail (scope: audit:read)
  • gatewerk_get_stats — review metrics + daily trend (scope: stats:read)

Authentication

You'll need a Gatewerk API key with the appropriate scopes. Generate one at:

  • Cloud: https://app.gatewerk.com → Settings → API Keys
  • Self-hosted: your Gatewerk instance's /settings/api-keys page

Common scope bundles:

  • agent (read your reviews + create new ones): reviews:create, feedback:read
  • reviewer (act on the inbox): reviews:read, reviews:decide, templates:read, notes:read, notes:write
  • admin (full surface): all scopes

Environment variables

VariableRequiredDescription
GATEWERK_API_KEYyesAPI key (gwk_...)
GATEWERK_URLnoGatewerk base URL (defaults to http://localhost:3100)
GATEWERK_REVIEWERnoReviewer email used as decision attribution

Links

Source: packages/mcp/README.md at commit 9b4f740

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.1.4LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts