Scope Gate MCP Server

Never hand an AI agent a full OAuth scope again. ScopeGate sits between your agents and the accounts they reach - yours or your clients'. You connect a service once, tick the exact actions an agent may call, and hand it an MCP endpoint that can do nothing else. Every call is logged; one click kills the key without touching the connection.

Teams that work with llm ops, scope and security and want a hosted endpoint instead of running a local process. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-28 · ★ 17 · #148 OF 216 MAINTAINED SECURITY · VERIFIED 2026-09-30

MIT · TypeScript servers · how we verify → /methodology

01 · Install Scope Gate

before you install - you'll need

The README does not document required environment variables for a basic install.

Claude Code

claude mcp add alifanov-scopegate --transport http https://scopegate.dev/api/mcp/{api_key}

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "alifanov-scopegate": {
      "url": "https://scopegate.dev/api/mcp/{api_key}"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://scopegate.dev/api/mcp/{api_key}

transport: streamable-http

endpoint alive - authentication required · probed 2026-09-30

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as remote - your agent's requests go to scopegate.dev

endpoint auth requires authentication - rejected our unauthenticated MCP initialize

license MIT - declared in the repository

registry namespace io.github.alifanov is GitHub-verified and matches the repo owner

03 · Who maintains Scope Gate

ScopeGate is maintained by alifanov. It's the only MCP server we track from this author; the repo dates to Feb 2026.

04 · Facts

repository: github.com/alifanov/scopegate
website: https://scopegate.dev/
category: security - ranked #148 of 216 actively-maintained security servers as of 2026-09-30.
registry: io.github.alifanov/scopegate (active, first published 2026-03-02 · 2 versions)

05 · Scope Gate FAQ

What is Scope Gate?

Is Scope Gate still maintained?

Yes - as of 2026-09-30, its last commit was 2026-09-28. We re-verify nightly.

How do I install Scope Gate?

Run `claude mcp add alifanov-scopegate --transport http https://scopegate.dev/api/mcp/{api_key}`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.

Does Scope Gate require authentication?

Yes - when we probed the endpoint on 2026-09-30, it rejected an unauthenticated MCP initialize; you'll need credentials to connect.

06 · Alternatives to Scope Gate

Alternatives to Scope Gate

Maintained security servers if Scope Gate isn't the fit.

Pairs well with

Servers that cover what Scope Gate doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · npm MCP · Anaconda MCP · Emisar · Apiiro Guardian Agent · Pihole

More TypeScript MCP servers · CLI (aligndottech) · Mikro MCP · Noun MCP · Photoshop MCP · see all