Memungkinkan AI client untuk melakukan evaluasi kebijakan dry-run demi keamanan agent tanpa penegakan aturan secara langsung.
Juga dikenal sebagai vantioai/vantio-open-core, vantio-open-core, @vantio/gate-mcp
- Stars
- 2
- Tools
- —
- Unduhan, 30 hari
- —
- Versi terbaru
- 0.1.0
- Commit terakhir
- 13 Nov 2026
- Lisensi
- —
Apa itu Vantio Gate MCP?
Vantio Gate adalah MCP server. Memungkinkan AI client untuk melakukan evaluasi kebijakan dry-run demi keamanan agent tanpa penegakan aturan secara langsung.
Ringkasan dibuat dari README proyek
Tentang Vantio Gate MCP server
Vantio Gate menyediakan observability untuk AI egress pada sistem Linux. Tool ini berfungsi sebagai tool local-first yang mencatat detail panggilan keluar seperti tujuan, proses, ukuran, dan waktu tanpa memblokir tindakan atau menyimpan data prompt yang sensitif. MCP server ini dirancang untuk developer yang perlu memantau keamanan agent melalui evaluasi kebijakan dry-run daripada penegakan aturan secara langsung.
User dapat mengimplementasikan ini melalui package @vantio/optics-mcp. Sistem ini bekerja dengan membungkus proses menggunakan Vantio CLI atau dengan mengintegrasikan Python SDK menggunakan decorator @shield. Untuk lingkungan Node.js, CLI akan menyuntikkan interceptor untuk mencakup fetch, http, WebSocket, dan protokol jaringan lainnya. Karena merupakan bagian dari tier gratis Optics, Anda tidak memerlukan akun atau API key untuk mengoperasikannya. Ini berbeda dengan Phantom Engine, yang menangani penegakan dan kontrol aktual untuk sistem yang terdaftar.
Apa yang bisa Anda lakukan dengannya
- 1Monitor outbound AI trafficAI client dapat melacak tujuan dan waktu dari setiap panggilan keluar yang dilakukan oleh sebuah proses.
- 2Audit network allowlistsDeveloper dapat memeriksa proses dan koneksi mana saja yang saat ini diizinkan oleh allowlist lokal.
- 3Identify unauthorized destinationsSistem dapat menandai ketika sebuah program terhubung ke tujuan yang belum pernah tercatat sebelumnya di dalam allowlist.
- 4Export security telemetryEvent keamanan dapat dikirim ke sistem eksternal menggunakan berbagai format seperti webhooks atau syslog.
Ditulis berdasarkan README proyek. Setiap use case diperiksa terhadap kutipan dari README tersebut.
Cara menginstal Vantio Gate MCP
Format diverifikasi 10 Nov 2026Instal Vantio Gate MCP di Claude Code
$ claude mcp add --env VANTIO_API_KEY=<YOUR_VANTIO_API_KEY> vantio-open-core -- npx -y @vantio/gate-mcpInstal Vantio Gate MCP di Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"vantio-open-core": {
"command": "npx",
"args": [
"-y",
"@vantio/gate-mcp"
],
"env": {
"VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>"
}
}
}
}Instal Vantio Gate MCP di VS Code
.vscode/mcp.json
{
"servers": {
"vantio-open-core": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@vantio/gate-mcp"
],
"env": {
"VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>"
}
}
}
}Instal Vantio Gate MCP di Claude Desktop
claude_desktop_config.json
{
"mcpServers": {
"vantio-open-core": {
"command": "npx",
"args": [
"-y",
"@vantio/gate-mcp"
],
"env": {
"VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>"
}
}
}
}Instal Vantio Gate MCP di Codex
~/.codex/config.toml
[mcp_servers.vantio-open-core] command = "npx" args = ["-y", "@vantio/gate-mcp"] [mcp_servers.vantio-open-core.env] VANTIO_API_KEY = "<YOUR_VANTIO_API_KEY>"
Instal Vantio Gate MCP di Gemini CLI
~/.gemini/settings.json
{
"mcpServers": {
"vantio-open-core": {
"command": "npx",
"args": [
"-y",
"@vantio/gate-mcp"
],
"env": {
"VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>"
}
}
}
}Konfigurasi
VANTIO_API_KEYRahasiaOptional Pro API key for gate_get_policy / gate_residual_risk against your control plane
VANTIO_API_BASEOptional Pro API base URL (default https://api.vantio.ai)
| Nama | Deskripsi | Tipe |
|---|---|---|
| VANTIO_API_KEY | Optional Pro API key for gate_get_policy / gate_residual_risk against your control plane | Rahasia |
| VANTIO_API_BASE | Optional Pro API base URL (default https://api.vantio.ai) |
Pengecekan otomatis
Berjalan 14 Nov 2026Laporan lengkap →Lolos checks otomatis kami. Ini bukan audit keamanan: baca kodenya dan berikan server akses paling terbatas yang dibutuhkannya. Cara kerja checks
- Source repository terhubung dan dapat dijangkauvantioai/vantio-open-core is public and reachablegithub.com/vantioai/vantio-open-core ↗Lolos
- Paket menyebut repo ini sebagai sumbernya@vantio/gate-mcp names vantioai/vantio-open-core as sourcenpmjs.com/package/@vantio/gate-mcp ↗Lolos
- Provenance build (atestasi Sigstore)No build attestation published for this releaseTidak diperiksa
- Lisensi open source (OSI)No licenseTemuan
- Ada commit atau release dalam satu tahun terakhirLast commit or release 2026-11-13github.com/vantioai/vantio-open-core ↗Lolos
- OpenSSF ScorecardTidak diperiksa
- Nama package tidak mirip dengan package populerNo popular package one edit away from @vantio/gate-mcpLolos
- Tidak ada advisory kritis di paket maupun dependensinya99 resolved dependencies checked; no critical advisoryosv.dev ↗Lolos
- Tidak ada instruksi tersembunyi untuk model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersLolos
- Tools yang bersifat destruktif telah diberi labelTidak diperiksa
- Endpoint remote menjawab handshake MCPTidak diperiksa
README
Lihat di GitHubVantio
Linux security for AI.
This repository contains Vantio Optics, the Phantom Engine installer, and the Python SDK.
Vantio Optics (Open Core)
Free, local-first observability for AI egress. Optics is the free Observe tier. It records the destination, the process, the size, and the timing of a supported outbound call. Does not block actions or retain prompts or completions.
The Optics home is moving to github.com/vantioai/vantio-optics. Publishing still runs from this repository. The editor extension stays at extensions/vantio-optics. Commands and local install notes are in extensions/vantio-optics/README.md.
Install
These are the versions npm and PyPI served on 2026-10-21. Manifests in this git tree can be newer than the registry.
| Package | Registry | Version |
|---|---|---|
@vantio/cli |
npm | 0.3.24 |
@vantio/agent-sdk |
npm | 0.2.4 |
vantio-agent-sdk |
PyPI | 3.1.1 |
@vantio/optics-mcp |
npm | 0.1.2 |
@vantio/gate-mcp |
npm | 0.1.0 |
@vantio/gate-mcp is a compatibility package for an older integration.
Optics CLI, on macOS, Linux, and Windows (WSL):
npm install -g @vantio/cli@0.3.24
vantio run node agent.js
vantio run injects the Node interceptor with NODE_OPTIONS --require for node, npx, tsx, and ts-node. On Node it covers fetch, undici, http/https, http2, net/tls, WebSocket, and spawned curl or wget.
Python SDK:
pip install vantio-agent-sdk==3.1.1
Wrap a Python callable with @shield. Prefixing vantio run python does not intercept by itself.
Node SDK:
npm install @vantio/agent-sdk@0.2.4
The Node SDK exposes shield(). Outbound Node coverage comes from vantio run.
Optics MCP:
npm install @vantio/optics-mcp@0.1.2
Free Optics needs no account and no API key.
Browser paths stay outside this wrap.
A process can miss the wrapper when it opens a socket the Node interceptor does not see, starts a subprocess outside vantio run, or uses a runtime other than Node without the Python SDK. Optics records the paths it wrapped.
vantio coverage prints the processes and connections recorded on this system, and which of those paths are on a local allowlist. vantio destinations flags the first time a recorded program connects to a destination that is not on that list. vantio export sends those events as OTLP/HTTP JSON, syslog or JSON lines, or a webhook. Optics does not stop the call.
Telemetry is disabled by default. Set VANTIO_TELEMETRY=1 to opt in. VANTIO_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 override that opt-in.
Phantom Engine installer
Phantom Engine is enforcement and control for enrolled Linux systems. Contact Vantio. The product page is vantio.ai/phantom-engine.
The installer source is packages/vantio-install. vantio-install is not on npm or PyPI. Operator install uses the sealed wheel described in packages/vantio-install/docs/QUICKSTART.md. The commands are vantio-install and vantio-verify. That install does not replace @vantio/cli. The installer notes in that package target Ubuntu 24.04 LTS on x86_64.
Documentation
- Site: vantio.ai
- Docs: vantio.ai/docs
- Optics: vantio.ai/optics
- Phantom Engine: vantio.ai/phantom-engine
- CLI: packages/vantio-cli/README.md
- Python SDK: packages/vantio-agent-sdk-py/README.md
- Editor extension: extensions/vantio-optics/README.md
License
@vantio/cli, @vantio/agent-sdk, and vantio-agent-sdk declare MIT. License files for the CLI and the Python SDK are packages/vantio-cli/LICENSE and packages/vantio-agent-sdk-py/LICENSE. The Node SDK declares MIT in packages/vantio-agent-sdk/package.json. There is no root LICENSE file. The MIT grant covers the published packages named here.
Security
Report a suspected vulnerability to security@vantio.ai. The process is SECURITY.md.
Contributing
See CONTRIBUTING.md and CODE_OF_CONDUCT.md.
Pertanyaan tentang Vantio Gate MCP
Bagaimana cara menambahkan Vantio Gate MCP ke Claude Code?
Jalankan claude mcp add --env VANTIO_API_KEY=<YOUR_VANTIO_API_KEY> vantio-open-core -- npx -y @vantio/gate-mcp di terminal Anda. Tambahkan --scope user agar tersedia di semua proyek.
Bagaimana cara menambahkan Vantio Gate MCP ke Cursor?
Buka ~/.cursor/mcp.json dan tambahkan server di bawah mcpServers, menggunakan config Cursor yang ditunjukkan di bagian instalasi di atas.
Apakah menggunakan Optics memerlukan akun atau API key?
Tidak, versi gratis Optics tidak memerlukan akun atau API key.
Apakah Vantio Optics dapat memblokir panggilan keluar?
Tidak, Optics adalah tool observability yang mencatat detail panggilan keluar tetapi tidak memblokir tindakan.