Vantio Gate
io.github.vantioaiPublished by GitHub account vantioaiv0.1.0Updated Oct 27, 2026
Vantio Gate — Policy Latch dry-run evaluate for agents. No live enforce from MCP.
Overview
Vantio Gate is a local MCP server for dry-run policy evaluation of agent actions, with no live enforcement from MCP.
- What you can do
- Evaluate a proposed agent action against a policy in dry-run mode before it runs
- Check residual risk against a Vantio control plane when a Pro API key is configured
- Report policy outcomes without enforcing or blocking anything from the MCP side
- When to use it
- Useful when you want an assistant to preview how a policy would judge an action, or to surface residual risk, before deciding whether to proceed. It is a compatibility package for an older integration, so check whether a newer Vantio component fits better.
- Requirements
- Runs as a local stdio process installed from the npm package @vantio/gate-mcp, so Node.js is needed. Optionally set VANTIO_API_KEY for policy and residual-risk calls against your control plane, and VANTIO_API_BASE to point at a different Pro API base URL. Desktop only.
Installation
In SourceWeft
- Open Vantio Gate in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
Vantio
Linux security for AI.
This repository contains Vantio Optics, the Phantom Engine installer, and the Python SDK.
Vantio Optics (Open Core)
Free, local-first observability for AI egress. Optics is the free Observe tier. It records the destination, the process, the size, and the timing of a supported outbound call. Does not block actions or retain prompts or completions.
The Optics home is moving to github.com/vantioai/vantio-optics. Publishing still runs from this repository. The editor extension stays at extensions/vantio-optics. Commands and local install notes are in extensions/vantio-optics/README.md.
Install
These are the versions npm and PyPI served on 2026-10-21. Manifests in this git tree can be newer than the registry.
@vantio/gate-mcp is a compatibility package for an older integration.
Optics CLI, on macOS, Linux, and Windows (WSL):
vantio run injects the Node interceptor with NODE_OPTIONS --require for node, npx, tsx, and ts-node. On Node it covers fetch, undici, http/https, http2, net/tls, WebSocket, and spawned curl or wget.
Python SDK:
Wrap a Python callable with @shield. Prefixing vantio run python does not intercept by itself.
Node SDK:
The Node SDK exposes shield(). Outbound Node coverage comes from vantio run.
Optics MCP:
Free Optics needs no account and no API key.
Browser paths stay outside this wrap.
A process can miss the wrapper when it opens a socket the Node interceptor does not see, starts a subprocess outside vantio run, or uses a runtime other than Node without the Python SDK. Optics records the paths it wrapped.
vantio coverage prints the processes and connections recorded on this system, and which of those paths are on a local allowlist. vantio destinations flags the first time a recorded program connects to a destination that is not on that list. vantio export sends those events as OTLP/HTTP JSON, syslog or JSON lines, or a webhook. Optics does not stop the call.
Telemetry is disabled by default. Set VANTIO_TELEMETRY=1 to opt in. VANTIO_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 override that opt-in.
Phantom Engine installer
Phantom Engine is enforcement and control for enrolled Linux systems. Contact Vantio. The product page is vantio.ai/phantom-engine.
The installer source is packages/vantio-install. vantio-install is not on npm or PyPI. Operator install uses the sealed wheel described in packages/vantio-install/docs/QUICKSTART.md. The commands are vantio-install and vantio-verify. That install does not replace @vantio/cli. The installer notes in that package target Ubuntu 24.04 LTS on x86_64.
Documentation
- Site: vantio.ai
- Docs: vantio.ai/docs
- Optics: vantio.ai/optics
- Phantom Engine: vantio.ai/phantom-engine
- CLI: packages/vantio-cli/README.md
- Python SDK: packages/vantio-agent-sdk-py/README.md
- Editor extension: extensions/vantio-optics/README.md
License
@vantio/cli, @vantio/agent-sdk, and vantio-agent-sdk declare MIT. License files for the CLI and the Python SDK are packages/vantio-cli/LICENSE and packages/vantio-agent-sdk-py/LICENSE. The Node SDK declares MIT in packages/vantio-agent-sdk/package.json. There is no root LICENSE file. The MIT grant covers the published packages named here.
Security
Report a suspected vulnerability to [email protected]. The process is SECURITY.md.
Contributing
See CONTRIBUTING.md and CODE_OF_CONDUCT.md.
Source: README.md at commit 7e4eef9
Tools
0Version history
1- v0.1.0LatestSep 16, 2026
Score
40% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Declare a license in the repository or the registry entry.