Skip to main content
Glama
Wany-i

TaskGateway-Local

by Wany-i
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

TaskGateway-Local

TaskGateway-Local is a deterministic, fail-closed gateway for discovering approved local resources, planning a bounded route, and rendering—but never executing—a selected call.

It exposes the same three operations through Python, a CLI, and a universal local MCP server:

  • taskgateway_search

  • taskgateway_plan

  • taskgateway_invoke

invoke always returns executed: false. The host retains its normal authorization and execution boundary.

Install

From the v1.0.0 GitHub release:

python -m pip install https://github.com/wany-i/TaskGateway-Local/releases/download/v1.0.0/taskgateway_local-1.0.0-py3-none-any.whl

For development, or when the MCP extra must be resolved explicitly:

git clone https://github.com/wany-i/TaskGateway-Local.git
cd TaskGateway-Local
python -m pip install ".[mcp]"

Python 3.11–3.13 is supported. An approved local index must be provided explicitly; the public package does not ship a private machine index.

Related MCP server: Permissioned MCP Server

CLI

taskgateway search "find an approved resource" --index C:\path\to\index.json --json
taskgateway plan "read an approved resource" --index C:\path\to\index.json --json
taskgateway invoke "<resource_ref>" --decision-id "<decision_id>" --index C:\path\to\index.json --json

MCP

Start the universal STDIO server:

taskgateway-mcp --index C:\path\to\index.json

The host launches this process and communicates over stdin/stdout. No port is opened. STDOUT is reserved for MCP protocol messages; application logging belongs on stderr.

WorkBuddy packaging is under integrations/workbuddy/plugin/. Other MCP hosts use the same server command; see MCP hosts.

Verify

python -m pip install -e ".[mcp,test]"
python -m pytest -q

The test suite covers core fail-closed behavior, tool schemas and annotations, structured MCP output, and a real STDIO initialization handshake.

Documentation

License

Released under the MIT License.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • LOOM

    goweft
    F
    license
    Not graded
    quality
    F
    maintenance
    A secure, declarative MCP runtime that turns YAML configs into MCP servers with trust enforcement, credential brokering, and tamper-evident audit logging.
    -

  • Permissioned MCP Server

    sn0bored
    A
    license
    A
    quality
    D
    maintenance
    A compact MCP server demonstrating explicit tool boundaries, least-privilege discovery, execution-time authorization, destructive-action confirmation, and metadata-only audit logs using a local note store.
    3
    MIT

  • velvet-rope

    paulchum
    A
    license
    Not graded
    quality
    B
    maintenance
    An MCP server for agent authorization that tests the full effect surface and enforces control over consequential actions before dispatch, emitting verifiable execution evidence.
    2
    Apache 2.0

  • datalox-gated-runtime

    Oshawott324
    A
    license
    Not graded
    quality
    A
    maintenance
    This MCP server provides a stateful, resettable, verifiable API runtime that gates every tool call, enabling agents to run long workflows against provider-shaped environments without live provider write access. It records decisions, side effects, and outcome evidence for replayable, verifiable benchmark runs.
    Apache 2.0