TruthGate MCP
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@TruthGate MCP mask the secrets in this .env file before I share it"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
TruthGate MCP (v0.1.2)
Sub-2ms Local Privacy DLP & Anti-"Silent Fake Success" Test Guardrail for Claude Code, Cursor, and OpenClaw
⚡ Click Here to Grab the $0.99 Early-Bird Pro Credit Pack via Polar.sh
🌐 Official Live Portal & Interactive Sandbox: https://00112238.xyz/truthgate/
TruthGate MCP runs 100% locally to protect developers and teams from the three biggest hazards in autonomous coding agents (Claude Code, Cursor, Codex, OpenClaw):
Accidental Credential & PII Leakage: Scans and masks
.envsecrets, AWS keys, API keys, and customer data in< 2msbefore context leaves your machine."Silent Fake Success": Stops AI agents from claiming bugs are fixed by tampering with test assertions, commenting out test cases, or injecting bogus mocks.
Destructive Command Airbag: Intercepts
rm -rf,DROP TABLE, and forced git overwrites.
⚡ 1-Minute Quickstart
Option 1: Run with Claude Desktop / Claude Code CLI
Add TruthGate to your claude_desktop_config.json or ~/.claude/claude_code_config.json:
{
"mcpServers": {
"truthgate": {
"command": "npx",
"args": ["-y", "github:wu00112238/truthgate-mcp"]
}
}
}Option 2: Run in Cursor MCP Settings
In Cursor Settings -> MCP -> Add New MCP Server:
npx -y github:wu00112238/truthgate-mcpRelated MCP server: VibeGuard MCP Server
🛡️ Available MCP Tools
Tool Name | Latency | Purpose |
|
| Scans text for secrets (OpenAI, Anthropic, AWS, emails, IPs) and replaces them with safe placeholders ( |
|
| Locks SHA-256 hashes of test suites; alerts if assertions ( |
|
| Classifies proposed terminal commands or SQL scripts, blocking dangerous executions. |
| Instant | Generates a direct |
💳 Pricing & Instant Activation
Community Free Tier: Open-source local DLP & basic test hash checks.
⚡ Early-Bird Pro Credit Pack ($0.99 USD): Purchase Instant Access on Polar.sh
🌐 Official Live Portal & Interactive Sandbox: https://00112238.xyz/truthgate/ — Unlocks 100+ metered Pro API verifications and CleanSignal cross-ecosystem credits.
📄 License
Apache License 2.0. Copyright (c) 2026 TruthGate Security HQ (wu00112238).
Available Tools
4 toolstruthgate_inspect_actionA
Airbag Guardrail: Classifies shell commands or DB queries to block accidental destruction (e.g. rm -rf, DROP TABLE).
Inputs: command (required).
truthgate_mask_contextA
Zero-egress local DLP: Masks API keys, PII, and credentials in code, .env, or logs before feeding to LLM.
Inputs: content (required).
truthgate_upgrade_pro_creditsB
Get an instant $0.99 Pro Credit Pack / License Key link to unlock unlimited team audit logs and priority guardrails.
Inputs: no named parameters.
truthgate_verify_test_integrityB
Anti-Silent-Fake-Success: Checks if proposed edits weaken test assertions or inject fake mocks.
Inputs: modifiedTestCode (required), originalTestCode (required).
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 4 tools
The three functional guardrail tools have clearly distinct purposes: masking sensitive context, checking test integrity, and inspecting actions. The upgrade_pro_credits tool is also clearly different, but it is a commercial action rather than a guardrail operation, which slightly reduces set-level coherence.
All tool names use the same truthgate_ prefix and consistent snake_case verb_noun structure. The pattern is predictable across all four tools.
Four tools is a reasonable size for a focused guardrail server, and the three core safety tools are well-scoped. However, one slot is occupied by a Pro credit purchase tool rather than a functional operational capability.
The server covers three important safety checks, but it lacks tools for configuring policies, retrieving audit logs, or checking license/audit status. The upgrade tool references audit logs and priority guardrails without exposing corresponding operational tools.
Maintenance
Related MCP Connectors
Checks AI-written code for leaked keys and made-up packages, on your machine. Never uploads code.
Detects database migration table locks, terraform cost leaks, and OWASP API flaws.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.
Related MCP Servers
- AlicenseAqualityDmaintenanceActs as a production-grade safety layer for AI-assisted coding, monitoring Git hygiene, scanning for security issues (PII, secrets, injection), and enabling semantic history search.9MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI coding tools to scan projects for security vulnerabilities, hardcoded secrets, injection flaws, and privacy violations with 699 rules and 76 MCP tools, all running locally with zero telemetry.17 npm7MIT
- FlicenseNot gradedqualityDmaintenanceEnables local security scanning and compliance gap analysis for code and text, detecting secrets, PII, and OWASP vulnerabilities, and assessing readiness across major frameworks like NCA, ISO 27001, NIST CSF, and SOC 2.-
- AlicenseNot gradedqualityBmaintenanceEnables scanning staged diffs, files, and raw text for secrets before they are committed, fully offline with masked findings and severity-based gating.1MIT