Arc Gate MCP

Community AI and agents

Runtime governance for MCP tool calls that blocks prompt injection and capability abuse before tool results reach the agent.

Install

The installation steps are in the documentation below. Documentation

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. arc-gate-mcp
  2. What it does
  3. Installation
  4. Usage
  5. Policy modes
  6. Links
  7. License
  8. Used with Heym

arc-gate-mcp

Runtime governance proxy for MCP tool calls. Blocks prompt injection and capability abuse before tool results reach your agent.

What it does

arc-gate-mcp sits between your MCP client and any MCP server. Every tool result passes through Arc Gate governance before reaching your agent — blocking prompt injection attacks that exploit the MCP trust boundary.

Installation

pip install arc-gate-mcp

Usage

arc-gate-mcp --upstream "uvx mcp-server-fetch" --policy balanced
With Claude Desktop
{
  "mcpServers": {
    "arc-gate": {
      "command": "uvx",
      "args": ["arc-gate-mcp", "--upstream", "uvx mcp-server-fetch", "--policy", "browser_agent"]
    }
  }
}

Policy modes

  • balanced — general purpose
  • browser_agent — web browsing agents
  • finance_agent — financial data agents
  • rag_assistant — document retrieval agents
  • strict — maximum enforcement

License

AGPL-3.0

Used with Heym

arc-gate-mcp is available as a template on Heym — an enterprise agent platform. Try the Governed Web Research Agent template to see Arc Gate MCP in action.

Frequently asked questions

What is Arc Gate MCP?

Runtime governance for MCP tool calls that blocks prompt injection and capability abuse before tool results reach the agent.

How do I install Arc Gate MCP?

Follow the installation steps in its documentation, shown on this page and in its repository.

Is Arc Gate MCP open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Arc Gate MCP?

It is published by 9hannahnine-jpg. AI.tn lists it but does not maintain or endorse it.

From the community awesome-mcp-servers lists and the project's GitHub repository. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.