{
  "markdown": "<p align=\"center\">\n  <img src=\".github/assets/banner.png\" alt=\"SealGate &mdash; connect &amp; govern how AI interacts with your data\" width=\"820\">\n</p>\n\n# Sealgate MCP Server\n\n[![MCP](https://img.shields.io/badge/protocol-MCP-blue)](https://modelcontextprotocol.io)\n[![npm](https://img.shields.io/npm/v/@sealgate/mcp)](https://www.npmjs.com/package/@sealgate/mcp)\n[![smithery badge](https://smithery.ai/badge/sealgate/gateway)](https://smithery.ai/servers/sealgate/gateway)\n[![MCP Registry](https://img.shields.io/badge/MCP%20Registry-ai.sealgate%2Fgateway-blue)](https://registry.modelcontextprotocol.io/v0/servers?search=sealgate)\n[![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)\n\nThe Model Context Protocol (MCP) server for [Sealgate](https://sealgate.ai),\nthe AI data-leak-prevention platform: a security gateway and data firewall that\nsits between AI agents (Claude, ChatGPT, Cursor, Copilot) and your organisation's\ndata and tools.\n\nThis server is a thin MCP proxy. It forwards a small set of tool calls to a\n**Sealgate gateway**, which you configure with two environment variables.\nSealgate runs managed release hosts (the remote MCP gateway at `mcp.sealgate.ai`\nand the Management API at `dashboard.sealgate.ai`), and demo or self-hosted orgs\nrun their own, so this bridge stays host-agnostic: you supply the URL and key.\n\n## Tools\n\n| Tool | What it does |\n|------|--------------|\n| `list_mcp_servers` | List the MCP servers governed by your Sealgate gateway, with access-control classification and connection status. |\n| `get_session_status` | Review recent agent sessions and audit events: what agents did, which data flowed, and any blocked actions. |\n\n## Connect to the hosted gateway\n\nSealgate runs a managed remote MCP gateway at `https://mcp.sealgate.ai/mcp`. It\nis a per-user proxy that aggregates every MCP server you have enabled behind one\nStreamable HTTP endpoint and enforces Sealgate's access-control policies on every\ncall. There is nothing to install: point your client at the endpoint and sign in\nthrough the browser.\n\n```text\nEndpoint:   https://mcp.sealgate.ai/mcp\nTransport:  streamable HTTP (remote, not stdio)\nAuth:       OAuth 2.1 in the browser, no key to paste\n```\n\n| Client | Add it |\n|:--|:--|\n| <img src=\".github/assets/clients/claude.svg\" width=\"17\" alt=\"\"> **Claude** | **[Add to Claude](https://claude.ai/new?modal=add-custom-connector&connectorName=SealGate&connectorUrl=https%3A%2F%2Fmcp.sealgate.ai%2Fmcp#settings/customize-connectors)** opens the *Add custom connector* dialog with the name and URL filled in. Claude flags it as suggested by an external link; that is expected. On Team and Enterprise plans an admin adds it. |\n| <img src=\".github/assets/clients/chatgpt.svg\" width=\"17\" alt=\"\"> **ChatGPT** | Settings &rarr; Connectors &rarr; Advanced settings &rarr; turn on **Developer mode**. Back on Connectors, click **Create**, paste the endpoint, and name it. Start a new chat so the tools menu refreshes. |\n| <img src=\".github/assets/clients/claude-code.svg\" width=\"17\" alt=\"\"> **Claude Code** | `claude mcp add --transport http --scope user sealgate https://mcp.sealgate.ai/mcp`<br>Then run `/mcp` in a session to sign in. |\n| <img src=\".github/assets/clients/cursor.svg\" width=\"17\" alt=\"\"> **Cursor** | [<picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://cursor.com/deeplink/mcp-install-light.svg\"><img src=\"https://cursor.com/deeplink/mcp-install-dark.svg\" alt=\"Add to Cursor\" height=\"24\"></picture>](https://cursor.com/en/install-mcp?name=sealgate&config=eyJ1cmwiOiJodHRwczovL21jcC5zZWFsZ2F0ZS5haS9tY3AifQ%3D%3D)<br>Not working? Add the endpoint by hand under Settings &rarr; MCP. |\n| <img src=\".github/assets/clients/vscode.svg\" width=\"17\" alt=\"\"> **VS Code** | **[Add to VS Code](https://vscode.dev/redirect/mcp/install?name=sealgate&config=%7B%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.sealgate.ai%2Fmcp%22%7D)** requires Copilot agent mode. |\n| <img src=\".github/assets/clients/goose.svg\" width=\"17\" alt=\"\"> **Goose** | [<img src=\"https://block.github.io/goose/img/extension-install-dark.svg\" alt=\"Install in Goose\" height=\"24\">](https://block.github.io/goose/extension?url=https%3A%2F%2Fmcp.sealgate.ai%2Fmcp&type=streamable_http&id=sealgate&name=sealgate&description=SealGate+MCP+gateway&timeout=300)<br>Adds it as an extension over streamable HTTP. |\n| <img src=\".github/assets/clients/grokbot.svg\" width=\"17\" alt=\"\"> **Grokbot** | Add a remote MCP server pointing at `https://mcp.sealgate.ai/mcp` over streamable HTTP, then sign in through the browser. |\n| <img src=\".github/assets/clients/mcp.svg\" width=\"17\" alt=\"\"> **Any MCP client** | Add a remote server at `https://mcp.sealgate.ai/mcp` over streamable HTTP. Cline, Zed and Windsurf all work; each spells the config differently (VS Code `servers`, Cursor and Cline `mcpServers`, Zed `context_servers`, and Windsurf wants `serverUrl` where everyone else wants `url`). |\n\nEvery one-click button routes through an `https://` install URL, since GitHub\nstrips custom URL schemes such as `cursor://` from links.\n\n### How OAuth works\n\nThe gateway is an OAuth 2.1 authorization server, so most clients connect with no\nAPI key at all. The flow uses dynamic client registration (RFC 7591) and client\nID metadata documents, mandatory PKCE (`S256`), and issues refresh tokens via the\n`offline_access` scope, so a session stays connected without re-authenticating\nevery hour. Discovery, consent, and token endpoints all live on the gateway\norigin, so self-hosted single-origin deployments work with no extra\nconfiguration.\n\n### API key in the URL\n\nClients that cannot run an OAuth flow can pass a Sealgate API key as a URL path\nsegment instead:\n\n```\nhttps://mcp.sealgate.ai/mcp/{api_key}/?client={label}\n```\n\nReplace `{api_key}` with the key from your dashboard and `{label}` with an\noptional session label. This is not OAuth and not an `Authorization` header; the\nkey travels in the path.\n\n`mcp.sealgate.ai` is the managed release host. Demo and self-hosted orgs run\ntheir own gateway host, so substitute your own URL where needed.\n\n## Connect your messaging apps\n\nThe same gateway fronts Sealgate's messaging connectors (the Beeper desktop app\nplus the `sealgate-stdiod` tunnel), so any client above can read and send across\nyour chat networks. Every message an agent reads or sends passes through the\nsame policy checks and lands in the same audit log as every other tool call.\n\n| Network | Guide |\n|:--|:--|\n| <img src=\"https://sealgate.ai/logos/networks/whatsapp.svg\" width=\"17\" alt=\"\"> **WhatsApp** | https://sealgate.ai/connect/whatsapp |\n| <img src=\"https://sealgate.ai/logos/networks/telegram.svg\" width=\"17\" alt=\"\"> **Telegram** | https://sealgate.ai/connect/telegram |\n| <img src=\"https://sealgate.ai/logos/networks/imessage.svg\" width=\"17\" alt=\"\"> **iMessage** | https://sealgate.ai/connect/imessage |\n| <img src=\"https://sealgate.ai/logos/networks/signal.svg\" width=\"17\" alt=\"\"> **Signal** | https://sealgate.ai/connect/signal |\n| <img src=\"https://sealgate.ai/logos/networks/linkedin.svg\" width=\"17\" alt=\"\"> **LinkedIn DMs** | https://sealgate.ai/connect/linkedin |\n| <img src=\"https://sealgate.ai/logos/networks/instagram.svg\" width=\"17\" alt=\"\"> **Instagram** | https://sealgate.ai/connect/instagram |\n| <img src=\"https://sealgate.ai/logos/networks/messenger.svg\" width=\"17\" alt=\"\"> **Messenger** | https://sealgate.ai/connect/messenger |\n| <img src=\"https://sealgate.ai/logos/networks/discord.svg\" width=\"17\" alt=\"\"> **Discord** | https://sealgate.ai/connect/discord |\n| <img src=\"https://sealgate.ai/logos/networks/x.svg\" width=\"17\" alt=\"\"> **X** | https://sealgate.ai/connect/x |\n| <img src=\"https://sealgate.ai/logos/networks/line.svg\" width=\"17\" alt=\"\"> **LINE** | https://sealgate.ai/connect/line |\n| **Per-client guides** | [Codex + iMessage](https://sealgate.ai/connect/imessage/codex), [Claude + LinkedIn](https://sealgate.ai/connect/linkedin/claude), [ChatGPT + WhatsApp](https://sealgate.ai/connect/whatsapp/chatgpt), and all 100 at https://sealgate.ai/connect |\n\nCodex + iMessage in one command: the companion repo\n[Edison-Watch/codex-imessage](https://github.com/Edison-Watch/codex-imessage)\nwires Codex to iMessage through the gateway with a single install step.\n\n## Configuration\n\nSet two environment variables, both issued or hosted by your organisation:\n\n| Variable | Description |\n|----------|-------------|\n| `SEALGATE_GATEWAY_URL` | Base URL of your Sealgate Management API (e.g. `https://dashboard.sealgate.ai`). |\n| `SEALGATE_API_KEY` | Sealgate API key from your dashboard. |\n\nIf either is unset, every tool returns a clear configuration message instead of\nfailing, so registry probes and `--help` never crash.\n\n## Install\n\nPrefer the hosted gateway above. The npm package is the stdio alternative for\nclients that cannot use a remote server; it runs via `npx` and needs the two\nenvironment variables from Configuration. Also published in the official MCP\nRegistry as `ai.sealgate/gateway` and `io.github.Edison-Watch/sealgate-mcp`.\n\n```json\n{\n    \"mcpServers\": {\n        \"sealgate\": {\n            \"command\": \"npx\",\n            \"args\": [\"-y\", \"@sealgate/mcp\"],\n            \"env\": {\n                \"SEALGATE_GATEWAY_URL\": \"https://dashboard.sealgate.ai\",\n                \"SEALGATE_API_KEY\": \"your-sealgate-api-key\"\n            }\n        }\n    }\n}\n```\n\nVS Code spells the same block as `servers` with `\"type\": \"stdio\"`. Ready-made\nfiles for each client live in [`examples/`](examples/).\n\n## Usage\n\n```bash\n# Run over stdio (default transport)\nnpx -y @sealgate/mcp\n\n# Show usage\nnpx -y @sealgate/mcp --help\n```\n\nSet `SEALGATE_MCP_TRANSPORT=http` (with an optional `PORT`, default 3000) to\nserve streamable HTTP instead of stdio.\n\n## Develop\n\nRequires [Bun](https://bun.sh).\n\n```bash\nbun install\nbun run src/index.ts --help   # run from source\nbun test                      # run tests\nbun run build                 # bundle to dist/\nmake ci                       # lint, typecheck, dead-code, and the rest\n```\n\n## Links\n\n- Website: https://sealgate.ai\n- Docs: https://docs.sealgate.ai\n- Developer docs, API reference, and integration guides: [SealGate developer docs](https://sealgate.ai/docs/developers)\n- Connect guides: https://sealgate.ai/connect\n- Contact: hello@sealgate.ai\n\n## License\n\nMIT. Copyright GPU-EVM LTD (Sealgate). See [LICENSE](LICENSE).\n",
  "bytes": 10357,
  "sha": "910aa99844dd1c6209f301d2a0585a7f2d58516fe6392431d371fc2f75aa574d",
  "repo_slug": "edison-watch/sealgate-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_ai_sealgate_gateway_1c0732a2/readme"
}