[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_109":110},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_57":49,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":47,"_69":70,"_71":72,"_73":74,"_75":76,"_77":78,"_79":-5,"_80":-5,"_81":-5,"_82":49,"_83":-5,"_84":59,"_85":86,"_87":88,"_89":90,"_91":92,"_93":94},"apiUrl","https://odel.app/api","creator","edison-watch","moduleId","sealgate-mcp","@edison-watch/sealgate-mcp","displayName","sealgate mcp","tagline","MCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.","iconKey","https://avatars.githubusercontent.com/u/153433599?v=4","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://mcp.sealgate.ai/mcp\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1787200108000,"updatedAt",1788322710000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=ai.sealgate%2Fgateway","sourceVerified",false,"sourceMissingSince","importedAt","upstreamStars",0,"upstreamUpdatedAt",1788300345000,"detectedTransport","streamable-http","detectedAuthType","bearer","probeStatus","ok","lastProbedAt","githubRepoUrl","https://github.com/Edison-Watch/sealgate-mcp","githubRepoFullName","Edison-Watch/sealgate-mcp","releaseId","ext-edison-watch-sealgate-mcp","version","1.0.0","descriptionMarkdown","

\n $\"SealGate$ \n

\n\n# Sealgate MCP Server\n\n[![MCP](https://img.shields.io/badge/protocol-MCP-blue)](https://modelcontextprotocol.io)\n[![npm](https://img.shields.io/npm/v/@sealgate/mcp)](https://www.npmjs.com/package/@sealgate/mcp)\n[![smithery badge](https://smithery.ai/badge/sealgate/gateway)](https://smithery.ai/servers/sealgate/gateway)\n[![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)\n\nThe Model Context Protocol (MCP) server for [Sealgate](https://sealgate.ai),\nthe AI data-leak-prevention platform: a security gateway and data firewall that\nsits between AI agents (Claude, ChatGPT, Cursor, Copilot) and your organisation's\ndata and tools.\n\nThis server is a thin MCP proxy. It forwards a small set of tool calls to a\n**Sealgate gateway**, which you configure with two environment variables.\nSealgate runs managed release hosts (the remote MCP gateway at `mcp.sealgate.ai`\nand the Management API at `dashboard.sealgate.ai`), and demo or self-hosted orgs\nrun their own, so this bridge stays host-agnostic: you supply the URL and key.\n\n## Tools\n\n| Tool | What it does |\n|------|--------------|\n| `list_mcp_servers` | List the MCP servers governed by your Sealgate gateway, with access-control classification and connection status. |\n| `get_session_status` | Review recent agent sessions and audit events: what agents did, which data flowed, and any blocked actions. |\n\n## Connect to the hosted gateway\n\nSealgate runs a managed remote MCP gateway at `https://mcp.sealgate.ai/mcp`. It\nis a per-user proxy that aggregates every MCP server you have enabled behind one\nStreamable HTTP endpoint and enforces Sealgate's access-control policies on every\ncall. There is nothing to install: point your client at the endpoint and sign in\nthrough the browser.\n\n```text\nEndpoint: https://mcp.sealgate.ai/mcp\nTransport: streamable HTTP (remote, not stdio)\nAuth: OAuth 2.1 in the browser, no key to paste\n```\n\n| Client | Add it |\n|:--|:--|\n| $\"\"$ **Claude** | **[Add to Claude](https://claude.ai/new?modal=add-custom-connector&connectorName=SealGate&connectorUrl=https%3A%2F%2Fmcp.sealgate.ai%2Fmcp#settings/customize-connectors)** opens the *Add custom connector* dialog with the name and URL filled in. Claude flags it as suggested by an external link; that is expected. On Team and Enterprise plans an admin adds it. |\n| $\"\"$ **ChatGPT** | Settings → Connectors → Advanced settings → turn on **Developer mode**. Back on Connectors, click **Create**, paste the endpoint, and name it. Start a new chat so the tools menu refreshes. |\n| $\"\"$ **Claude Code** | `claude mcp add --transport http --scope user sealgate https://mcp.sealgate.ai/mcp`
Then run `/mcp` in a session to sign in. |\n| $\"\"$ **Cursor** | [

](https://cursor.com/en/install-mcp?name=sealgate&config=eyJ1cmwiOiJodHRwczovL21jcC5zZWFsZ2F0ZS5haS9tY3AifQ%3D%3D)
Not working? Add the endpoint by hand under Settings → MCP. |\n| $\"\"$ **VS Code** | **[Add to VS Code](https://vscode.dev/redirect/mcp/install?name=sealgate&config=%7B%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.sealgate.ai%2Fmcp%22%7D)** requires Copilot agent mode. |\n| $\"\"$ **Goose** | [ $\"Install$ ](https://block.github.io/goose/extension?url=https%3A%2F%2Fmcp.sealgate.ai%2Fmcp&type=streamable_http&id=sealgate&name=sealgate&description=SealGate+MCP+gateway&timeout=300)
Adds it as an extension over streamable HTTP. |\n| $\"\"$ **Grokbot** | Add a remote MCP server pointing at `https://mcp.sealgate.ai/mcp` over streamable HTTP, then sign in through the browser. |\n| $\"\"$ **Any MCP client** | Add a remote server at `https://mcp.sealgate.ai/mcp` over streamable HTTP. Cline, Zed and Windsurf all work; each spells the config differently (VS Code `servers`, Cursor and Cline `mcpServers`, Zed `context_servers`, and Windsurf wants `serverUrl` where everyone else wants `url`). |\n\nEvery one-click button routes through an `https://` install URL, since GitHub\nstrips custom URL schemes such as `cursor://` from links.\n\n### How OAuth works\n\nThe gateway is an OAuth 2.1 authorization server, so most clients connect with no\nAPI key at all. The flow uses dynamic client registration (RFC 7591) and client\nID metadata documents, mandatory PKCE (`S256`), and issues refresh tokens via the\n`offline_access` scope, so a session stays connected without re-authenticating\nevery hour. Discovery, consent, and token endpoints all live on the gateway\norigin, so self-hosted single-origin deployments work with no extra\nconfiguration.\n\n### API key in the URL\n\nClients that cannot run an OAuth flow can pass a Sealgate API key as a URL path\nsegment instead:\n\n```\nhttps://mcp.sealgate.ai/mcp/{api_key}/?client={label}\n```\n\nReplace `{api_key}` with the key from your dashboard and `{label}` with an\noptional session label. This is not OAuth and not an `Authorization` header; the\nkey travels in the path.\n\n`mcp.sealgate.ai` is the managed release host. Demo and self-hosted orgs run\ntheir own gateway host, so substitute your own URL where needed.\n\n## Configuration\n\nSet two environment variables, both issued or hosted by your organisation:\n\n| Variable | Description |\n|----------|-------------|\n| `SEALGATE_GATEWAY_URL` | Base URL of your Sealgate Management API (e.g. `https://dashboard.sealgate.ai`). |\n| `SEALGATE_API_KEY` | Sealgate API key from your dashboard. |\n\nIf either is unset, every tool returns a clear configuration message instead of\nfailing, so registry probes and `--help` never crash.\n\n## Install\n\nAdd the server to your MCP client. It runs over stdio via `npx`.\n\n### Claude Desktop, Cursor\n\n```json\n{\n \"mcpServers\": {\n \"sealgate\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@sealgate/mcp\"],\n \"env\": {\n \"SEALGATE_GATEWAY_URL\": \"https://dashboard.sealgate.ai\",\n \"SEALGATE_API_KEY\": \"your-sealgate-api-key\"\n }\n }\n }\n}\n```\n\n### VS Code\n\n```json\n{\n \"servers\": {\n \"sealgate\": {\n \"type\": \"stdio\",\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@sealgate/mcp\"],\n \"env\": {\n \"SEALGATE_GATEWAY_URL\": \"https://dashboard.sealgate.ai\",\n \"SEALGATE_API_KEY\": \"your-sealgate-api-key\"\n }\n }\n }\n}\n```\n\nCopy-paste configs also live in [`examples/`](https://github.com/Edison-Watch/sealgate-mcp/blob/main/examples/).\n\n## Usage\n\n```bash\n# Run over stdio (default transport)\nnpx -y @sealgate/mcp\n\n# Show usage\nnpx -y @sealgate/mcp --help\n```\n\nSet `SEALGATE_MCP_TRANSPORT=http` (with an optional `PORT`, default 3000) to\nserve streamable HTTP instead of stdio.\n\n## Develop\n\nRequires [Bun](https://bun.sh).\n\n```bash\nbun install\nbun run src/index.ts --help # run from source\nbun test # run tests\nbun run build # bundle to dist/\nmake ci # lint, typecheck, dead-code, and the rest\n```\n\n## Links\n\n- Website: https://sealgate.ai\n- Docs: https://docs.sealgate.ai\n- Contact: hello@sealgate.ai\n\n## License\n\nMIT. Copyright GPU-EVM LTD (Sealgate). See [LICENSE](https://github.com/Edison-Watch/sealgate-mcp/blob/main/LICENSE).\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays","upstream",{"_97":98,"_99":100,"_101":102,"_103":104,"_105":106,"_107":108},"requiredSecrets",[],"tags",[],"assets",[],"stats",{"_95":59,"_96":59},"ratingAvg","reviewCount","topics",[],"license","MIT","language","TypeScript","registryName","ai.sealgate/gateway","homepage","https://sealgate.ai","packages",[],"ENV",{"_111":112,"_113":114,"_115":116},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]