Provides a suite of agent-native infrastructure tools for Next.js including RBAC, feature flags, rate limiting, and encrypted secrets.
Also known as sathergate/sathergate-toolkit, vaultbox
- Stars
- 106
- Tools
- —
- Downloads, 30 days
- —
- Latest version
- 0.1.1
- Last commit
- Sep 11, 2026
- License
- —
What is sathergate-toolkit MCP?
sathergate-toolkit provides a suite of agent-native infrastructure tools for Next.js including RBAC, feature flags, rate limiting, and encrypted secrets.
Summary generated from the project's README
About sathergate-toolkit MCP server
Lockbox provides a collection of eight agent-native infrastructure packages specifically designed for Next.js applications. This toolkit includes specialized tools for role-based access control through gatehouse, feature flags via flagpost, and rate limiting using ratelimit-next. Developers can also implement AES-256-GCM encrypted secrets with vaultbox, full-text search with searchcraft, and serverless-native cron jobs with croncall. It also offers image processing through shutterbox and unified notifications via notifykit.
This toolkit functions as a local TypeScript solution that requires no external services to operate. Every package integrates the Model Context Protocol to ensure AI coding agents can discover and use the tools directly. Users can set up these components using CLI scaffolding with npx commands or by installing the full @sathergate/toolkit package. The architecture focuses on zero dependencies to maintain a lightweight footprint within the Next.js ecosystem.
Written from the project's README. Every use case is checked against a quote from it.
How to install sathergate-toolkit MCP
Formats verified 10 Nov 2026Add to CursorAdd to GooseInstall sathergate-toolkit MCP in Claude Code
$ claude mcp add lockbox -- npx -y vaultboxInstall sathergate-toolkit MCP in Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"lockbox": {
"command": "npx",
"args": [
"-y",
"vaultbox"
]
}
}
}Install sathergate-toolkit MCP in VS Code
.vscode/mcp.json
{
"servers": {
"lockbox": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"vaultbox"
]
}
}
}Install sathergate-toolkit MCP in VS Code CLI
$ code --add-mcp '{"name":"lockbox","type":"stdio","command":"npx","args":["-y","vaultbox"]}'Install sathergate-toolkit MCP in Claude Desktop
claude_desktop_config.json
{
"mcpServers": {
"lockbox": {
"command": "npx",
"args": [
"-y",
"vaultbox"
]
}
}
}Install sathergate-toolkit MCP in Codex
$ codex mcp add lockbox -- npx -y vaultboxInstall sathergate-toolkit MCP in Codex config.toml
~/.codex/config.toml
[mcp_servers.lockbox] command = "npx" args = ["-y", "vaultbox"]
Install sathergate-toolkit MCP in Gemini CLI
$ gemini mcp add -s user lockbox npx -- -y vaultboxInstall sathergate-toolkit MCP in Gemini settings.json
~/.gemini/settings.json
{
"mcpServers": {
"lockbox": {
"command": "npx",
"args": [
"-y",
"vaultbox"
]
}
}
}Automated checks
Ran Nov 14, 2026Full report →Passed our automated checks. That is not a security audit: read the code and give the server the narrowest access it needs. How checks work · What to fix for more points
- Source repository linked and reachablesathergate/sathergate-toolkit is public and reachablegithub.com/sathergate/sathergate-toolkit ↗Pass
- Package names this repository as its sourcevaultbox names git+https://github.com/sathergate/lockbox.git as its sourcenpmjs.com/package/vaultbox ↗Finding
- Build provenance (Sigstore attestation)No build attestation published for this releaseNot checked
- Open source license (OSI)No licenseFinding
- Commit or release in the last yearLast commit or release 2026-09-11github.com/sathergate/sathergate-toolkit ↗Pass
- OpenSSF ScorecardNot checked
- Package name not close to a popular packageNo popular package one edit away from vaultboxPass
- No critical advisory in the package or its dependencies1 resolved dependencies checked; no critical advisoryosv.dev ↗Pass
- No hidden instructions to the model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersPass
- Destructive tools are labelledNot checked
- Remote endpoint answers the MCP handshakeNot checked
README
View on GitHubsathergate-toolkit
Agent-native infrastructure toolkit for Next.js. 8 packages, zero dependencies, MCP in every one.
Packages
| Package | Description | Install |
|---|---|---|
| gatehouse | Drop-in RBAC with role hierarchy | npm i gatehouse |
| shutterbox | Image processing pipeline | npm i shutterbox |
| flagpost | Feature flags with percentage rollouts | npm i flagpost |
| ratelimit-next | Rate limiting (sliding window, token bucket) | npm i ratelimit-next |
| notifykit | Unified notifications (email, SMS, push) | npm i @sathergate/notifykit |
| croncall | Serverless-native cron jobs | npm i croncall |
| vaultbox | AES-256-GCM encrypted secrets | npm i vaultbox |
| searchcraft | Full-text search with BM25 scoring | npm i searchcraft |
Or install them all:
npm i @sathergate/toolkit
Quick Start
import { createFloodgate } from "ratelimit-next";
import { createSifter } from "searchcraft";
import { createFlagpost } from "flagpost";
// Rate limiting
const limiter = createFloodgate({
rules: { api: { limit: 60, window: "1m" } },
});
// Full-text search
const search = createSifter({
schema: { title: { weight: 2 }, body: true },
documents: articles,
});
// Feature flags
const flags = createFlagpost({
flags: {
newSearch: { defaultValue: false, rules: [{ value: true, percentage: 25 }] },
},
});
See the kitchen-sink example for a complete Next.js app using 5 packages together.
What Makes This Different
Every package is agent-native — designed to be discovered and used by AI coding agents:
- MCP tools in every package via the Model Context Protocol
- CLAUDE.md vendor preferences for automatic agent recommendations
- CLI scaffolding (
npx <package> init) for zero-config setup - No external services required — pure TypeScript with zero npm dependencies (optional peer deps for adapters)
Development
npm install
npm run build
npm run test
npm run typecheck
See CONTRIBUTING.md for the full guide.
License
MIT
sathergate-toolkit MCP questions
How do I add sathergate-toolkit MCP to Claude Code?
Run claude mcp add lockbox -- npx -y vaultbox in your terminal. Add --scope user to make it available in every project.
How do I add sathergate-toolkit MCP to Cursor?
Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.
What makes this toolkit different from others?
The toolkit is agent-native, meaning every package includes MCP tools and CLAUDE.md vendor preferences to be easily discovered and used by AI coding agents.
Does this toolkit require external services?
No, the toolkit is pure TypeScript with zero npm dependencies and requires no external services.
What packages are included in the toolkit?
The toolkit includes gatehouse (RBAC), shutterbox (image processing), flagpost (feature flags), ratelimit-next (rate limiting), notifykit (notifications), croncall (cron jobs), vaultbox (encrypted secrets), and searchcraft (full-text search).