AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompare
Home/
Security & Safety/
agents-shipgate
agents-shipgate logo

agents-shipgate

Active·★ 90·Apache-2.0·Updated 2026-10-18

Agents Shipgate is an open-source CLI and GitHub Action that serves as a deterministic merge gate for AI-generated agent capability changes. It performs local-first, static Tool-Use Readiness review, scanning various agent artifacts to ensure explicit approval policies, scope coverage, and idempotency evidence before merging.

#AI Agents#Tool-Use Readiness#Static Analysis#CI/CD#Merge Gate#Security Review
© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.

Guides
#Policy Enforcement
#GitHub Actions
$ Install
$ pipx install agents-shipgate
↗ Visit site★ GitHub
01

Features

01Acts as a deterministic merge gate for AI-generated agent capability changes.
02Performs local-first, static analysis without agent execution or LLM calls.
03Scans and validates tool definitions from various sources (MCP, OpenAPI, OpenAI SDK, LangChain, CrewAI, etc.).
04Generates comprehensive Tool-Use Readiness Reports and PR comments with merge verdicts.
05Supports CI/CD integration as a GitHub Action for automated review.
02

Compatibility

Python
Runtime
Verified via docs
GitHub Actions
CI/CD Integration
Verified via docs
CLI
Interface
Verified via docs
03

Quick start

1
$ pipx install agents-shipgate
04

Use cases

↳Reviewing and validating new or changed agent tool definitions before merging pull requests.
↳Enforcing approval policies, scope coverage, and idempotency for agent actions in CI/CD pipelines.
↳Providing static evidence for security and GRC reviewers without executing agent code.
↳Blocking risky capabilities, such as financial transactions, if explicit safeguards are not declared.
↳Integrating with coding agents (e.g., Claude Code, Codex, Cursor) to automate self-correction during development.
05

Alternatives

⚡Top VS:
VSctrlrun★27→VSDashClaw★313→VSReversecore_MCP★211→

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Compatibility03Quick start04Use cases05Alternatives
VS
wirken
★192
→
ctrlrun logo
ctrlrun★ 27
The execution safety layer for AI agents.
VSCompare→
DashClaw logo
DashClaw★ 313
🛡️The governance runtime for AI agents. Intercept actions, enforce guard policies, require approvals, and produce audit-ready decision trails.
VSCompare→
Reversecore_MCP logo
Reversecore_MCP★ 211
A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.
VSCompare→
wirken logo
wirken★ 192
The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit log.
VSCompare→
kru logo
kru★ 129
Local-first MCP password and credential manager for AI agents. Use passwords, API keys, SSH identities, and TOTP without exposing hidden plaintext to the model.
VSCompare→
AegisFlow logo
AegisFlow★ 36
Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.
VSCompare→
mcp-hangar logo
mcp-hangar★ 18
MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.
VSCompare→
sourcerykit logo
sourcerykit★ 21
SourceryKit — counterspell for hallucinating agents. Python SDK that breaks the illusion on every tool call, API response, and MCP handoff before bad outputs propagate.
VSCompare→
See all alternatives →
ThreeMoonsLab /
agents-shipgate
↗

The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, and SDK tool surfaces. Open-source CLI + GitHub Action.

90Apache-2.0
Last commit5d ago
StatusActive
CategorySecurity & Safety
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit