Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Changed the definition of "gate_add_app", "gate_create_project" and "gate_metrics"
⟨28 unchanged words⟩ calls like "GET /orders/42", which becomerules.rulesReturnsallowingtheanyappid. Returns key (shown once)., app.id and normalized rules. Send key as Authorization: Bearer <key> to the project gateway; never send the admin key to the workload.
PutCreateOdileaGateFree project in front of an existing HTTPS API. No signup or payment required. For a credential-free demo use https://sandbox.gate.odilelabs.com with GET /customers/:cid/tickets/:id. Returns project_id, admin_key (shown once) and the gateway base URL apps call instead of the API. A real API and its credentials need owner authorization.
⟨22 unchanged words⟩ 24-hour anomaly counts, and separate current-month gatewayusage.usage: plan, used, allowed, plus upgrade URL and checkout path on Free at 80% or above. Only POST the checkout path when the admin asks to upgrade; reading metrics never starts checkout. Project admin only. Audit may be partial: ⟨22 unchanged words⟩
Certificate recorded, valid to 2027-01-17
Authorization not required
Added "gate_openshell_setup"; changed the definition of "gate_audit_proof", "gate_list_actions", "gate_list_apps" and 3 more (20 tools before, 21 now)
Read chained audit rows,anddecided-actiontheirfeature snapshots and anchors with an HMAC-SHA256 signature.OldNorowssealedbeforepaths/bodies,genesisnotes, keys or IPs in the action labels. Legacy actions lack snapshots and areexcluded;excluded.
Added "gate_set_response" (19 tools before, 20 now)
Choose response fields for an app — Opt-in JSON response redaction: return only explicit JSON Pointer paths, e.g. /id and /items/*/name. * matches one segment; selecting a container allows its whole subtree. Applies to every upstream response for this app, including errors. Maximum 1 MiB and 5 seconds to read; invalid/non-JSON responses are withheld. No bodies are stored. A withheld reply never reverses an upstream write. null disables filtering. Free and Pro.
Added "gate_check_setup" and "gate_metrics" (17 tools before, 19 now)
Check an agent integration setup — Read actual Gate protection settings before giving an integration production access. Reports observe-only mode, writes without mandatory runs, missing user-token configuration, wildcard grants and approval separation, with evidence, exact remedies and explicit limits. Sends no upstream requests, changes no settings and uses no gateway quota. Configuration-only: not a security certificate or runtime enforcement test.
Read Gate operational metrics — Read last-24-hour stored call counts by HTTP status and reason, measured duration through response headers (including upstream wait), and separate current-month gateway usage. Project admin only. Audit may be partial: invalid-key sampling and audit-off periods are disclosed. No upstream requests, quota use or policy changes; not a health certificate or performance guarantee.
Unknown → Live
First tool surface recorded: 17 tools (server version 1.0.0)
https://gate.odilelabs.com/mcp (mcp_streamable_http) — from mcp_registry, with the record
Showing the latest 9 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
{"additionalProperties":false,"properties":{"actions_after":{"description":"Action cursor from next_actions_after","type":"string"},"admin_key":{"description":"The project admin key ⟨38 unchanged words⟩
⟨5 unchanged words⟩ in another state), with the exact call.ApprovingWithisandoneinstalled approval-risk model, pending actions sort byariskpersondescendinginandtheincludedashboard,risknot(0–1)byand risk_features (top two advisory signals). No model means no score and newest first. Only atool.person decides in the dashboard.
The project's apps with their allowed calls, limits, state andstate.anomaly-guard settings.
⟨12 unchanged words⟩ through response headers (including upstream wait), per-app anomaly scores and 24-hour anomaly counts, and separate current-month gateway usage. Project admin only. ⟨26 unchanged words⟩
⟨15 unchanged words⟩ apps and approvers, applies run mode, loop, learning andlearninganomaly-guard settings and alerts. Example plugin: {name: anomaly-guard, settings: {mode: alert, z_threshold: 4, min_minutes: 3, half_life: 60}}. Never revokes or deletes; differences it cannot apply ⟨22 unchanged words⟩
⟨8 unchanged words⟩ , routes, rate limits, run mode, plugins including anomaly-guard, alerts, approvers) without changing anything. anomaly-guard settings: mode off|alert|strict, z_threshold 2–10, min_minutes 1–30, half_life 5–1440. Returns errors with their path, warnings, and the normalized config.
Discover one-command OpenShell setup — Read-only local setup plan for native OpenShell + Gate: one command, exact installer hash, recipe schema, prerequisites, authority boundaries and cleanup. Default creates an isolated Free read-only demo with no model or payment. A trusted local controller may configure an owner-authorized API with explicit routes/scope and private credential files. This tool does not run commands, create resources or accept credentials.