Skip to main content
Glama

TruthGate MCP (v0.1.2)

Sub-2ms Local Privacy DLP & Anti-"Silent Fake Success" Test Guardrail for Claude Code, Cursor, and OpenClaw

License MCP Buy $0.99 Credits

⚡ Click Here to Grab the $0.99 Early-Bird Pro Credit Pack via Polar.sh

🌐 Official Live Portal & Interactive Sandbox: https://00112238.xyz/truthgate/

TruthGate MCP runs 100% locally to protect developers and teams from the three biggest hazards in autonomous coding agents (Claude Code, Cursor, Codex, OpenClaw):

  1. Accidental Credential & PII Leakage: Scans and masks .env secrets, AWS keys, API keys, and customer data in < 2ms before context leaves your machine.

  2. "Silent Fake Success": Stops AI agents from claiming bugs are fixed by tampering with test assertions, commenting out test cases, or injecting bogus mocks.

  3. Destructive Command Airbag: Intercepts rm -rf, DROP TABLE, and forced git overwrites.


⚡ 1-Minute Quickstart

Option 1: Run with Claude Desktop / Claude Code CLI

Add TruthGate to your claude_desktop_config.json or ~/.claude/claude_code_config.json:

{
  "mcpServers": {
    "truthgate": {
      "command": "npx",
      "args": ["-y", "github:wu00112238/truthgate-mcp"]
    }
  }
}

Option 2: Run in Cursor MCP Settings

In Cursor Settings -> MCP -> Add New MCP Server:

npx -y github:wu00112238/truthgate-mcp

Related MCP server: VibeGuard MCP Server

🛡️ Available MCP Tools

Tool Name

Latency

Purpose

truthgate_mask_context

< 2ms

Scans text for secrets (OpenAI, Anthropic, AWS, emails, IPs) and replaces them with safe placeholders ([SECRET_API_KEY_1]).

truthgate_verify_test_integrity

< 1ms

Locks SHA-256 hashes of test suites; alerts if assertions (expect, assert) were stripped to fake a pass.

truthgate_inspect_action

< 0.5ms

Classifies proposed terminal commands or SQL scripts, blocking dangerous executions.

truthgate_upgrade_pro_credits

Instant

Generates a direct $0.99 top-up checkout link inside your terminal.


💳 Pricing & Instant Activation

🌐 Official Live Portal & Interactive Sandbox: https://00112238.xyz/truthgate/ — Unlocks 100+ metered Pro API verifications and CleanSignal cross-ecosystem credits.


📄 License

Apache License 2.0. Copyright (c) 2026 TruthGate Security HQ (wu00112238).

Available Tools

4 tools
truthgate_inspect_actionA

Airbag Guardrail: Classifies shell commands or DB queries to block accidental destruction (e.g. rm -rf, DROP TABLE).

NameRequiredDescriptionDefault
commandYesShell command or action to validate

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses the safety-oriented behavior ('block accidental destruction') but does not explain what the classifier returns, whether it blocks execution or merely reports a verdict, how false positives are handled, or what happens on a destructive match.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no wasted words; the core purpose and examples are immediately clear.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple one-parameter classifier this is nearly sufficient, but with no annotations and no output schema, the description should clarify the return format (classification/verdict) so the agent knows how to act on the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the parameter is already documented. The description adds useful semantic examples of what the classifier detects ('rm -rf, DROP TABLE'), giving the agent concrete expectations beyond the schema's generic 'Shell command or action to validate'.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Classifies') and resource ('shell commands or DB queries'), plus the outcome ('block accidental destruction'). It is clearly distinct from the sibling truthgate_* tools, though it does not explicitly name or contrast them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied: validate a command before executing it to prevent destructive actions. There is no explicit when-to-use/when-not guidance or comparison to alternatives, leaving the agent to infer the workflow.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

truthgate_mask_contextA

Zero-egress local DLP: Masks API keys, PII, and credentials in code, .env, or logs before feeding to LLM.

NameRequiredDescriptionDefault
contentYesRaw code, log, or document text to redact

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. 'Zero-egress local DLP' is a genuinely useful disclosure (no network transmission, runs locally), but it does not say what the tool returns, how masks are represented, or whether masking is reversible/deterministic — significant gaps for a mutation-shaped tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler: the safety property ('Zero-egress local') and the action ('Masks ... before feeding to LLM') both land immediately. Nothing to trim.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter tool this is close, but with no annotations and no output schema the description should state what comes back (masked text, placeholders, mapping) so the agent knows the result is safe to forward. That return-behavior gap is the main missing piece.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with a single well-described parameter ('Raw code, log, or document text to redact'). The description adds no parameter-level detail such as size limits, encoding expectations, or multi-document handling, so it does not exceed what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Masks') and concrete targets (API keys, PII, credentials) across named input types (code, .env, logs). It is clearly a redaction tool and does not overlap with the sibling tools (integrity verification, action inspection, credit upgrade), though it never explicitly contrasts itself with them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'...before feeding to LLM' implies the usage context, so an agent can infer this is a pre-flight sanitization step. However, there are no explicit when-to-use/when-not conditions, no mention of alternatives, and no statement about whether this replaces or complements truthgate_inspect_action or truthgate_verify_test_integrity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

truthgate_upgrade_pro_creditsB

Get an instant $0.99 Pro Credit Pack / License Key link to unlock unlimited team audit logs and priority guardrails.

NameRequiredDescriptionDefault

No parameters

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It mentions the $0.99 cost and that it returns a link, but does not clarify whether calling it initiates a purchase, what permissions are required, how the link is scoped, or what side effects occur.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single compact sentence with the core action and cost front-loaded. The promotional slash phrasing ('Pro Credit Pack / License Key link') mildly blurs exactly what is returned, but overall it is efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter tool this is adequate: it states the cost, the returned link, and the high-level benefit. However, with no annotations or output schema, it should clarify whether the call is purely a read/link retrieval or a purchase trigger, and what authentication or team context is needed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and an empty schema, so there are no parameter semantics to document. The baseline score for this case is 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Get') and resource ('Pro Credit Pack / License Key link') and states the intended outcome of unlocking audit-log and guardrail features. It is clearly distinct from the sibling tools, which focus on masking, integrity verification, and action inspection, though it does not explicitly name those alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies the tool is for upgrading to Pro, but gives no explicit guidance on when to use it versus alternatives, when not to use it, or what prerequisites must be met. An agent must infer the usage context entirely.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

truthgate_verify_test_integrityB

Anti-Silent-Fake-Success: Checks if proposed edits weaken test assertions or inject fake mocks.

NameRequiredDescriptionDefault
modifiedTestCodeYesProposed test file contents
originalTestCodeYesOriginal test file contents

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full disclosure burden. It names the two failure modes it detects, which is real behavioral content, but says nothing about whether the check is read-only, whether it blocks or only reports, or what verdict/response the agent receives — critical for a gate-style tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler, and the distinctive anti-pattern label comes first. It is arguably over-compressed given how little guidance surrounds it, but nothing in it is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no annotations, the description must convey the result shape (pass/fail verdict, findings) and the calling context; it conveys neither. For a gate the agent is expected to act on, this leaves the agent unable to interpret or act on the response.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with both parameters documented as 'test file contents', so the baseline is 3. The description reinforces the comparison semantics ('proposed edits' vs. implicitly original) but adds no format, size, or framing requirements beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb+resource: 'Checks if proposed edits weaken test assertions or inject fake mocks' on a test-integrity target. The framing ('Anti-Silent-Fake-Success') plus the concrete detection criteria distinguish it from siblings like truthgate_inspect_action and truthgate_mask_context. It stops short of a full 5 because it never explicitly says it compares original vs. modified test files, though the schema implies that.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The 'Anti-Silent-Fake-Success' label implies the trigger condition — call this before accepting edits that touch test files — but that is inferred, not stated. There is no explicit when-to-use, when-not-to-use, or comparison to the sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updatesv0.1.2
    • First observedtruthgate_inspect_action
    • First observedtruthgate_mask_context
    • First observedtruthgate_upgrade_pro_credits
    • First observedtruthgate_verify_test_integrity

TDQS

B3.4/5.0

Scored across 4 tools

Disambiguation4/5

The three functional guardrail tools have clearly distinct purposes: masking sensitive context, checking test integrity, and inspecting actions. The upgrade_pro_credits tool is also clearly different, but it is a commercial action rather than a guardrail operation, which slightly reduces set-level coherence.

Naming Consistency5/5

All tool names use the same truthgate_ prefix and consistent snake_case verb_noun structure. The pattern is predictable across all four tools.

Tool Count4/5

Four tools is a reasonable size for a focused guardrail server, and the three core safety tools are well-scoped. However, one slot is occupied by a Pro credit purchase tool rather than a functional operational capability.

Completeness3/5

The server covers three important safety checks, but it lacks tools for configuring policies, retrieving audit logs, or checking license/audit status. The upgrade tool references audit logs and priority guardrails without exposing corresponding operational tools.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI coding tools to scan projects for security vulnerabilities, hardcoded secrets, injection flaws, and privacy violations with 699 rules and 76 MCP tools, all running locally with zero telemetry.
    4 npm
    7
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables local security scanning and compliance gap analysis for code and text, detecting secrets, PII, and OWASP vulnerabilities, and assessing readiness across major frameworks like NCA, ISO 27001, NIST CSF, and SOC 2.
    -