{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-15", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "agentgate", "name": "AgentGate", "vendor": "Mohit Singh (mohitdebian)", "vendorUrl": "https://github.com/mohitdebian/AgentGate", "kind": "http-api", "category": "guardrails", "summary": "AgentGate is an open-source, self-hosted gateway that checks an agent's tool calls before they run. A small local classifier scores each call and a YAML policy returns allow, deny or ask, through a REST API or an MCP stdio wrapper.", "url": "https://www.anchorterminal.com/tools/agentgate", "markdownUrl": "https://www.anchorterminal.com/tools/agentgate.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agentgate.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agentgate.json", "repo": "https://github.com/mohitdebian/AgentGate", "license": "MIT", "transports": [ "http", "stdio" ], "packages": [], "auth": "none", "authNotes": "No account. The agent endpoints (`/v1/sessions`, `/v1/assess`) are open unless the owner sets `AG_AGENT_KEY`, then need `Authorization: Bearer \u003ckey\u003e` or `x-agent-key`. Dashboard endpoints need `AG_DASHBOARD_KEY`, which falls back to `dev-key-123` when unset and is also accepted as a `?token=` query parameter. The checkpoint and shadow-summary endpoints have no auth check in the source.", "pricing": "free", "pricingNotes": "Free under MIT with nothing to buy. The owner runs four containers (Postgres, the Python decision service, the Fastify proxy and the dashboard), with an NVIDIA GPU recommended for the classifier and a CPU path in the code.", "priceSummary": "Free ยท OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the source, the docs or the wiki (checked 2026-10-15). The project has no paid tier.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 0, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-15" }, "docsUrl": "https://github.com/mohitdebian/AgentGate/wiki/Client-Integration-Guide", "openapi": "https://github.com/mohitdebian/AgentGate/blob/main/docs/openapi.yaml", "capabilities": [ "guard.policy", "guard.injection", "guard.self-host" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "mit", "typescript", "python", "mcp", "docker", "openapi" ], "graded": true, "anchor": { "graded": true, "score": 48.5, "grade": "D", "agentReady": false, "rank": 883, "ranked": true, "rankOf": 1094, "categoryRank": 16, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 53, "maintenance": 28, "payments": 60, "reliability": 44, "schema": 47, "security": 49, "transparency": 56 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 44, "points": 8.8, "reason": "Read as local software, since the owner runs it. No package on npm, PyPI or a container registry. Install is a git clone and `docker compose up`, with Python 3.11+, Node 22+ and Docker Compose v2 stated (10 of 20). A public CI workflow runs ESLint, Ruff, 25 Vitest tests and the decision service's Pytest file. The last six runs on main passed by 15 October 2026, after two failures on 13 and 14 October. The Docker job only validates the compose file (20 of 25). No outside issues yet. The maintainer filed 20 issues as a self-audit, and six stay open, including the MCP wrapper deadlock and the wildcard-rule bypass, which a commit of 13 October says it fixed (12 of 25). No tags, and CHANGELOG.md holds one Unreleased line (2 of 15). Version 0.1.0, three days old (0 of 15)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 47, "points": 7.64, "reason": "`docs/openapi.yaml` covers seven paths. It lists `GET /v1/approvals`, which the code does not serve, leaves out the checkpoint and shadow endpoints, and types `verdict` as a free string (12 of 25). No llms.txt. Markdown docs in the repository and the GitHub wiki (5 of 10). The API reference and wiki state each endpoint's purpose and the policy DSL is specified, with no guidance on when not to use it (10 of 20). Requests are validated with zod and required fields are marked. `action.arguments` is free-form by nature, and verdicts and reason codes are not enumerated in the contract (8 of 15). curl, Python and TypeScript examples. Error responses are not documented, and the docs disagree with the code on details such as a `201` for sessions where the code returns 200 and the approval response shape (7 of 15). Paths under `/v1`, with an empty changelog (5 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 53, "points": 8.61, "reason": "The assess response is small, a verdict, reason codes, four head probabilities, versions and latency (20 of 25). `/v1/decisions` has `limit`, a keyset `cursor` and a `status` filter, behind the dashboard key (12 of 20). Reason codes such as `untrusted_prompt_influence` and `model_error` tell an agent why. On `ask` the agent gets a `decision_id` but cannot read the outcome without the dashboard key, the MCP wrapper returns `allow_with_checkpoint` as an unhandled-verdict error, and HTTP error bodies vary in shape (8 of 20). No idempotency key. A repeated assess writes a new decision and a new approval request (6 of 20). Two required fields per call and fail-closed defaults. No SDK, only snippets in Python and TypeScript and the MCP wrapper (7 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 49, "points": 8.57, "reason": "Read with the API checklist, as the gateway is itself the security layer. Credential model. Agent endpoints are open unless `AG_AGENT_KEY` is set, and compose publishes the proxy on 0.0.0.0:8080 without it. The dashboard key falls back to `dev-key-123`, both keys are single static secrets compared in constant time, and the dashboard key is accepted as `?token=`, which the API reference documents for the SSE stream (15 less 10, 5 of 30). Approvals are the product's core. Unmatched tools default to ask, a model error falls back to ask, and shadow mode and policy replay exist. The checkpoint revert endpoint, which runs git on the proxy's workspace, has no auth check (15 of 20). Injection posture. Tool results are wrapped in escaped `\u003cuntrusted\u003e` sentinels, but the proxy marks every call `trusted` and sends no history unless the caller passes `history_override`, and no detection accuracy is published (9 of 15). Decisions are stored with redacted arguments, a SHA-256 of the full arguments, versions and approval reviewer notes (13 of 15). SECURITY.md with private reporting and a 48-hour acknowledgement target, and security issues filed and fixed in public. Issue 6 was closed as resolved on 15 October 2026 while the default key and query-string token it named remain in the code. No security.txt, bounty or certification (7 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 60, "points": 7.5, "reason": "Self-hosted rule. Free under MIT with nothing to buy (20). No card or account (20). Clone and run with no signup, and the model weights on Hugging Face are not gated (20). No payment protocol (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 28, "points": 2.45, "reason": "No tagged release or package. The code and the Hugging Face weights were last changed on 15 October 2026, so half credit because nothing is versioned as a release (15 of 30). No releases or dated changelog entries (0 of 20). All 20 issues are the maintainer's own, and 14 were closed within two days, each with one comment. The one we read, on issue 6, names the fixing commit. No outside issue or pull request has been answered yet, and the project has one fork and no stars (8 of 25). Not in the official MCP registry and no SDK package (0 of 15). CI passes on main, with older major versions of Fastify 4, Vitest 0.34 and ESLint 8 in the proxy (5 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 56, "points": 4.9, "note": "editorial 59, provenance 53", "reason": "MIT for the code and for the model weights (30). Self-hosted, so data stays in the owner's Postgres. The docs describe argument redaction and hashing, and arguments are redacted before the classifier unless a tool sets `send_raw_to_model`. No page sets out retention, and the README's \"$0, self-hosted\" claim agrees with the code (15 of 30). SECURITY.md lists 0.1.x as supported. No deprecation policy (2 of 20). No telemetry code found in AgentGate's source, and no statement either way. The dashboard loads Google Fonts and the decision service downloads weights from Hugging Face on start, which the docs mention only as model loading (12 of 20)." } ], "assessment": { "date": "2026-10-15", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "The assess response is small, a verdict, reason codes, four head probabilities, versions and latency (20 of 25). `/v1/decisions` has `limit`, a keyset `cursor` and a `status` filter, behind the dashboard key (12 of 20). Reason codes such as `untrusted_prompt_influence` and `model_error` tell an agent why. On `ask` the agent gets a `decision_id` but cannot read the outcome without the dashboard key, the MCP wrapper returns `allow_with_checkpoint` as an unhandled-verdict error, and HTTP error bodies vary in shape (8 of 20). No idempotency key. A repeated assess writes a new decision and a new approval request (6 of 20). Two required fields per call and fail-closed defaults. No SDK, only snippets in Python and TypeScript and the MCP wrapper (7 of 15).", "maintenance": "No tagged release or package. The code and the Hugging Face weights were last changed on 15 October 2026, so half credit because nothing is versioned as a release (15 of 30). No releases or dated changelog entries (0 of 20). All 20 issues are the maintainer's own, and 14 were closed within two days, each with one comment. The one we read, on issue 6, names the fixing commit. No outside issue or pull request has been answered yet, and the project has one fork and no stars (8 of 25). Not in the official MCP registry and no SDK package (0 of 15). CI passes on main, with older major versions of Fastify 4, Vitest 0.34 and ESLint 8 in the proxy (5 of 10).", "payments": "Self-hosted rule. Free under MIT with nothing to buy (20). No card or account (20). Clone and run with no signup, and the model weights on Hugging Face are not gated (20). No payment protocol (0).", "reliability": "Read as local software, since the owner runs it. No package on npm, PyPI or a container registry. Install is a git clone and `docker compose up`, with Python 3.11+, Node 22+ and Docker Compose v2 stated (10 of 20). A public CI workflow runs ESLint, Ruff, 25 Vitest tests and the decision service's Pytest file. The last six runs on main passed by 15 October 2026, after two failures on 13 and 14 October. The Docker job only validates the compose file (20 of 25). No outside issues yet. The maintainer filed 20 issues as a self-audit, and six stay open, including the MCP wrapper deadlock and the wildcard-rule bypass, which a commit of 13 October says it fixed (12 of 25). No tags, and CHANGELOG.md holds one Unreleased line (2 of 15). Version 0.1.0, three days old (0 of 15).", "schema": "`docs/openapi.yaml` covers seven paths. It lists `GET /v1/approvals`, which the code does not serve, leaves out the checkpoint and shadow endpoints, and types `verdict` as a free string (12 of 25). No llms.txt. Markdown docs in the repository and the GitHub wiki (5 of 10). The API reference and wiki state each endpoint's purpose and the policy DSL is specified, with no guidance on when not to use it (10 of 20). Requests are validated with zod and required fields are marked. `action.arguments` is free-form by nature, and verdicts and reason codes are not enumerated in the contract (8 of 15). curl, Python and TypeScript examples. Error responses are not documented, and the docs disagree with the code on details such as a `201` for sessions where the code returns 200 and the approval response shape (7 of 15). Paths under `/v1`, with an empty changelog (5 of 15).", "security": "Read with the API checklist, as the gateway is itself the security layer. Credential model. Agent endpoints are open unless `AG_AGENT_KEY` is set, and compose publishes the proxy on 0.0.0.0:8080 without it. The dashboard key falls back to `dev-key-123`, both keys are single static secrets compared in constant time, and the dashboard key is accepted as `?token=`, which the API reference documents for the SSE stream (15 less 10, 5 of 30). Approvals are the product's core. Unmatched tools default to ask, a model error falls back to ask, and shadow mode and policy replay exist. The checkpoint revert endpoint, which runs git on the proxy's workspace, has no auth check (15 of 20). Injection posture. Tool results are wrapped in escaped `\u003cuntrusted\u003e` sentinels, but the proxy marks every call `trusted` and sends no history unless the caller passes `history_override`, and no detection accuracy is published (9 of 15). Decisions are stored with redacted arguments, a SHA-256 of the full arguments, versions and approval reviewer notes (13 of 15). SECURITY.md with private reporting and a 48-hour acknowledgement target, and security issues filed and fixed in public. Issue 6 was closed as resolved on 15 October 2026 while the default key and query-string token it named remain in the code. No security.txt, bounty or certification (7 of 20).", "transparency": "MIT for the code and for the model weights (30). Self-hosted, so data stays in the owner's Postgres. The docs describe argument redaction and hashing, and arguments are redacted before the classifier unless a tool sets `send_raw_to_model`. No page sets out retention, and the README's \"$0, self-hosted\" claim agrees with the code (15 of 30). SECURITY.md lists 0.1.x as supported. No deprecation policy (2 of 20). No telemetry code found in AgentGate's source, and no statement either way. The dashboard loads Google Fonts and the decision service downloads weights from Hugging Face on start, which the docs mention only as model loading (12 of 20)." }, "sources": [ { "what": "repository README, LICENSE, SECURITY.md and CHANGELOG.md", "url": "https://github.com/mohitdebian/AgentGate", "seen": "2026-10-15" }, { "what": "commit history (initial open-source release, 12 October 2026)", "url": "https://github.com/mohitdebian/AgentGate/commits/main", "seen": "2026-10-15" }, { "what": "proxy API routes and auth checks", "url": "https://github.com/mohitdebian/AgentGate/blob/main/proxy/src/api/index.ts", "seen": "2026-10-15" }, { "what": "MCP stdio wrapper", "url": "https://github.com/mohitdebian/AgentGate/blob/main/proxy/src/mcp.ts", "seen": "2026-10-15" }, { "what": "context builder (trust label and history)", "url": "https://github.com/mohitdebian/AgentGate/blob/main/proxy/src/context/index.ts", "seen": "2026-10-15" }, { "what": "redaction and audit record", "url": "https://github.com/mohitdebian/AgentGate/blob/main/proxy/src/audit/index.ts", "seen": "2026-10-15" }, { "what": "default policy", "url": "https://github.com/mohitdebian/AgentGate/blob/main/proxy/policy.yaml", "seen": "2026-10-15" }, { "what": "docker compose (ports and environment)", "url": "https://github.com/mohitdebian/AgentGate/blob/main/docker-compose.yml", "seen": "2026-10-15" }, { "what": "OpenAPI file", "url": "https://github.com/mohitdebian/AgentGate/blob/main/docs/openapi.yaml", "seen": "2026-10-15" }, { "what": "API reference", "url": "https://github.com/mohitdebian/AgentGate/blob/main/docs/API_REFERENCE.md", "seen": "2026-10-15" }, { "what": "getting started", "url": "https://github.com/mohitdebian/AgentGate/blob/main/docs/GETTING_STARTED.md", "seen": "2026-10-15" }, { "what": "wiki, Client Integration Guide", "url": "https://github.com/mohitdebian/AgentGate/wiki/Client-Integration-Guide", "seen": "2026-10-15" }, { "what": "CI workflow", "url": "https://github.com/mohitdebian/AgentGate/blob/main/.github/workflows/ci.yml", "seen": "2026-10-15" }, { "what": "CI runs", "url": "https://api.github.com/repos/mohitdebian/AgentGate/actions/runs", "seen": "2026-10-15" }, { "what": "issues (20, all filed by the maintainer)", "url": "https://api.github.com/repos/mohitdebian/AgentGate/issues?state=all", "seen": "2026-10-15" }, { "what": "issue 6 and its closing comment", "url": "https://github.com/mohitdebian/AgentGate/issues/6", "seen": "2026-10-15" }, { "what": "Hugging Face model card and file list", "url": "https://huggingface.co/codeload/agentgate-qwen-0.8b", "seen": "2026-10-15" }, { "what": "Hugging Face demo Space metadata", "url": "https://huggingface.co/api/spaces/codeload/agentgate-demo", "seen": "2026-10-15" }, { "what": "GitHub repository search (other projects named AgentGate)", "url": "https://api.github.com/search/repositories?q=agentgate+created:2026-10-01..2026-10-15", "seen": "2026-10-15" } ], "openQuestions": [ "Judgement call on category. Listed in guardrails, not agent-auth. Agent-auth covers OAuth and delegated access to third-party apps, and AgentGate grants no access. It scores each tool call for injection and blast radius and applies a policy, which is the guardrails category's injection and policy work.", "The lead matched. The repository's second commit on 12 October 2026 is \"feat: initial open-source release of AgentGate security checkpoint\", and the wiki's Client Integration Guide covers MCP and REST. Several unrelated GitHub projects created in October 2026 share the name, and the Linux Foundation's agentgateway is a different product.", "Possible deduction left open. Issue 6 (insecure default secret and query-string token) was closed on 15 October 2026 as \"Resolved in commit f84960d\", but `dev-key-123` and `?token=` remain in `proxy/src/api/index.ts` at commit 104ac0b. The README's verification output ends \"System is secure\". We did not deduct, since the issue is the maintainer's own and partly fixed (constant-time comparison was added).", "`firstReleased` is the commit date, 12 October 2026, as there is no tag, release or package. `lastRelease` is null for the same reason.", "We did not install or run the stack, the model or the demo Space. Behaviour claims come from the source at commit 104ac0b, the docs and the model card.", "`.env.example` sets `AGENTGATE_AUTH_TOKEN`, which the code does not read. The variables the code reads are `AG_AGENT_KEY` and `AG_DASHBOARD_KEY`.", "unchecked: whether Unsloth or the Hugging Face libraries send usage data when the decision service starts. We read AgentGate's own source only." ] }, "negative": 0, "verdict": "An agent or its host can send each tool call to one REST endpoint, or wrap an MCP server, and get allow, deny or ask from a local classifier and a YAML policy, with an audit log and approval queue. The project is three days old, auth is off by default, and no detection accuracy is published.", "bestFor": "A team that wants a self-hosted check between an agent and its shell, database or webhook tools, with a human approval queue.", "strengths": [ "One documented call, `POST /v1/assess`, returns a verdict, reason codes and four head probabilities", "Fail-closed defaults. A model error or timeout falls back to ask, and unmatched tools default to ask", "Decisions are logged in Postgres with redacted arguments, a SHA-256 of the full arguments and approval reviewer notes", "MIT code and MIT model weights on Hugging Face with no gate, run entirely on the owner's machines", "Shadow mode and policy replay let an operator test a policy against past decisions before enforcing it" ], "weaknesses": [ "Agent endpoints need no key unless `AG_AGENT_KEY` is set, the proxy binds 0.0.0.0:8080, and the dashboard key defaults to `dev-key-123`", "Checkpoint revert, which runs git on the proxy's workspace, has no auth check in the source of 15 October 2026", "No tagged release, an empty changelog and version 0.1.0, three days after the first commit", "The MCP wrapper treats `allow_with_checkpoint` as an error and does not send the agent key to `/v1/assess`", "No published accuracy or false-positive rate for the classifier, trained in 60 steps per its model card" ], "agentNotes": [ "Create a session with the user's real goal first. The goal-alignment head scores every later call against it", "Pass earlier tool results in `history_override` with `untrusted: true` for web or email content, or the injection head sees only the action", "On `ask`, stop and tell the user the `decision_id`. Polling `/v1/decisions/:id` needs the dashboard key", "Treat `allow_with_checkpoint` as allow and keep the `checkpoint_id` for an undo", "Expect HTTP 404 with `not_found` for an unknown session and 401 when the owner has set an agent key" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 48.5 } ], "editorialScores": { "ergonomics": 53, "maintenance": 28, "payments": 60, "reliability": 44, "schema": 47, "security": 49, "transparency": 59 }, "provenanceScore": 53 }, "connect": { "install": "git clone https://github.com/mohitdebian/AgentGate.git \u0026\u0026 cd AgentGate \u0026\u0026 docker compose up -d", "http": "curl -s -X POST http://localhost:8080/v1/assess -H \"Content-Type: application/json\" -d '{\"session_id\":\"\u003cid from POST /v1/sessions\u003e\",\"action\":{\"tool\":\"bash_exec\",\"arguments\":{\"command\":\"rm -rf /var/www\"}}}'", "config": { "mcpServers": { "postgres": { "args": [ "/path/to/AgentGate/proxy/dist/src/mcp.js", "npx", "-y", "@modelcontextprotocol/server-postgres", "postgresql://user:pass@localhost:5432/production" ], "command": "node", "env": { "AGENTGATE_URL": "http://localhost:8080" } } } } }, "letme": { "capability": "https://letme.dev/guard.policy", "tool": "https://letme.dev/agentgate" }, "notable": [ "The repository was created on 12 October 2026, and its second commit that day is named \"feat: initial open-source release of AgentGate security checkpoint\". No tag or GitHub release exists (https://github.com/mohitdebian/AgentGate/commits/main)", "Each call to `POST /v1/assess` is scored by a LoRA adapter on Qwen3.5-0.8B with four heads (untrusted influence, goal alignment, reversibility, external send), then matched against `policy.yaml` (https://huggingface.co/codeload/agentgate-qwen-0.8b)", "The MCP wrapper sits in front of any stdio MCP server, sends each `tools/call` to `/v1/assess` and forwards it only on allow (https://github.com/mohitdebian/AgentGate/blob/main/proxy/src/mcp.ts)", "By default the proxy labels every call `trusted` and sends no earlier tool results to the classifier unless the caller passes `history_override` with `untrusted` steps (https://github.com/mohitdebian/AgentGate/blob/main/proxy/src/api/index.ts)", "All 20 GitHub issues were filed by the maintainer as a self-audit on 13 and 14 October 2026. Six are open, including one on missing authentication for the runtime endpoints (https://github.com/mohitdebian/AgentGate/issues)", "The latency and throughput figures in the README (38 ms p95, 262 requests a second) are the maintainer's own measurements. The model card publishes no accuracy or false-positive figures (https://github.com/mohitdebian/AgentGate#benchmarks)" ], "area": "models", "details": [ { "label": "Surface listed", "value": "The self-hosted proxy API (`/v1/sessions`, `/v1/assess`) and the MCP stdio wrapper, read from the repository at commit 104ac0b, the wiki and the Hugging Face model card on 15 October 2026. Nothing was installed or run" }, { "label": "Age", "value": "Three days. First commit 12 October 2026, 44 commits to 15 October, no tag or release, `proxy/package.json` at 0.1.0" }, { "label": "Components", "value": "Fastify proxy in TypeScript (port 8080), FastAPI decision service in Python (port 9000, loopback in compose), Postgres 16 and a React dashboard (port 5173)" }, { "label": "Verdicts", "value": "allow, deny, ask (queued for an operator) and allow_with_checkpoint (a git pre-image the operator can revert)" }, { "label": "Classifier", "value": "codeload/agentgate-qwen-0.8b, a LoRA adapter on unsloth/Qwen3.5-0.8B with four classification heads, MIT, created on Hugging Face on 13 October 2026" }, { "label": "Policy", "value": "`policy.yaml` with per-tool rules on head probabilities and command effects (read, write, delete, net, privilege, exec), wildcards and a default per tool. Editable and replayable from the dashboard" }, { "label": "Integrations", "value": "REST, the MCP stdio wrapper, and Python, TypeScript, LangChain and CrewAI snippets in the wiki. No SDK package" }, { "label": "Audit", "value": "Every decision in Postgres with redacted arguments, an arguments hash, head outputs, policy and model versions, and approval reviewer and note" }, { "label": "Related project", "value": "Not the Linux Foundation's agentgateway, a separate Rust gateway with a similar name" } ], "provenance": { "legalEntity": "Mohit Singh (individual)", "domain": "", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/mohitdebian/AgentGate/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-15", "notes": [ "The licence file reads Copyright (c) 2026 Mohit Singh. The GitHub account mohitdebian links to mohitbuilds.in, a personal developer page.", "No terms or privacy policy. The software runs on the owner's machines, so there is no vendor endpoint or status page to check.", "SECURITY.md routes reports to GitHub private vulnerability reporting or a personal email, with a 48-hour acknowledgement target. No security.txt, since the project has no website.", "CHANGELOG.md holds a single Unreleased line, \"Initial scaffolding for Phase 1\"." ], "score": 53, "checks": [ { "check": "Legal entity named", "value": "Mohit Singh (individual)", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": ", no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "no hosted endpoint", "points": 0, "max": 0, "state": "na" }, { "check": "Terms of service", "value": "nothing hosted, so the MIT licence stands in", "points": 10, "max": 10, "state": "ok" }, { "check": "Privacy policy", "value": "nothing hosted, not scored", "points": 0, "max": 0, "state": "na" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/agentgate.json" } }