Vantio Gate MCP server

Q: How do I add Vantio Gate MCP to Claude Code?

Run `claude mcp add --env VANTIO_API_KEY= vantio-open-core -- npx -y @vantio/gate-mcp` in your terminal. Add `--scope user` to make it available in every project.

Q: How do I add Vantio Gate MCP to Cursor?

Open `~/.cursor/mcp.json` and add the server under `mcpServers`, using the Cursor config shown in the install section above.

✓ VerifiedCommit Nov 13, 2026

vantioai/vantio-open-core · python

Allows an AI client to perform dry-run policy evaluations for agent security without live enforcement.

Also known as vantioai/vantio-open-core, vantio-open-core, @vantio/gate-mcp

stdio Security

Install GitHub ↗

Stars: 2
Tools: —
Downloads, 30 days: —
Latest version: 0.1.0
Last commit: Nov 13, 2026
License: —

What is Vantio Gate MCP?

Vantio Gate allows an AI client to perform dry-run policy evaluations for agent security without live enforcement.

Summary generated from the project's README

About Vantio Gate MCP server

Vantio Gate provides observability for AI egress on Linux systems. It functions as a local-first tool that records outbound call details such as destination, process, size, and timing without blocking actions or retaining sensitive prompt data. This server is designed for developers who need to monitor agent security through dry-run policy evaluations rather than live enforcement.

Users can implement this via the @vantio/optics-mcp package. The system works by wrapping processes using the Vantio CLI or by integrating the Python SDK with the @shield decorator. For Node.js environments, the CLI injects an interceptor to cover fetch, http, WebSocket, and other network protocols. Because it is part of the free Optics tier, it requires no account or API key to operate. It is distinct from the Phantom Engine, which handles actual enforcement and control for enrolled systems.

What you can do with it

1Monitor outbound AI trafficAn AI client can track the destination and timing of every outbound call made by a process.
2Audit network allowlistsA developer can check which recorded processes and connections are currently permitted by a local allowlist.
3Identify unauthorized destinationsThe system can flag when a program connects to a destination that has not been previously recorded on the allowlist.
4Export security telemetrySecurity events can be sent to external systems using various formats like webhooks or syslog.

Written from the project's README. Every use case is checked against a quote from it.

How to install Vantio Gate MCP

Formats verified 10 Nov 2026

Claude CodeCursorVS CodeClaude DesktopCodexGemini CLI

$ claude mcp add --env VANTIO_API_KEY=<YOUR_VANTIO_API_KEY> vantio-open-core -- npx -y @vantio/gate-mcp

~/.cursor/mcp.json

{
  "mcpServers": {
    "vantio-open-core": {
      "command": "npx",
      "args": [
        "-y",
        "@vantio/gate-mcp"
      ],
      "env": {
        "VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "vantio-open-core": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@vantio/gate-mcp"
      ],
      "env": {
        "VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>"
      }
    }
  }
}

claude_desktop_config.json

{
  "mcpServers": {
    "vantio-open-core": {
      "command": "npx",
      "args": [
        "-y",
        "@vantio/gate-mcp"
      ],
      "env": {
        "VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>"
      }
    }
  }
}

~/.codex/config.toml

[mcp_servers.vantio-open-core]
command = "npx"
args = ["-y", "@vantio/gate-mcp"]

[mcp_servers.vantio-open-core.env]
VANTIO_API_KEY = "<YOUR_VANTIO_API_KEY>"

~/.gemini/settings.json

{
  "mcpServers": {
    "vantio-open-core": {
      "command": "npx",
      "args": [
        "-y",
        "@vantio/gate-mcp"
      ],
      "env": {
        "VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>"
      }
    }
  }
}

Set 2 environment variables before starting the server (below).Setup guides:Claude Code Cursor VS Code Claude Desktop

Configuration

VANTIO_API_KEYSecret
Optional Pro API key for gate_get_policy / gate_residual_risk against your control plane
VANTIO_API_BASE
Optional Pro API base URL (default https://api.vantio.ai)

Name	Description
VANTIO_API_KEY	Optional Pro API key for gate_get_policy / gate_residual_risk against your control plane	Secret
VANTIO_API_BASE	Optional Pro API base URL (default https://api.vantio.ai)

Automated checks

Ran Nov 14, 2026Full report →

92/100

Passed our automated checks. That is not a security audit: read the code and give the server the narrowest access it needs. How checks work

Show this score in your README

Source repository linked and reachablevantioai/vantio-open-core is public and reachablegithub.com/vantioai/vantio-open-core ↗Pass
Package names this repository as its source@vantio/gate-mcp names vantioai/vantio-open-core as sourcenpmjs.com/package/@vantio/gate-mcp ↗Pass
Build provenance (Sigstore attestation)No build attestation published for this releaseNot checked
Open source license (OSI)No licenseFinding
Commit or release in the last yearLast commit or release 2026-11-13github.com/vantioai/vantio-open-core ↗Pass
OpenSSF ScorecardNot checked
Package name not close to a popular packageNo popular package one edit away from @vantio/gate-mcpPass
No critical advisory in the package or its dependencies99 resolved dependencies checked; no critical advisoryosv.dev ↗Pass
No hidden instructions to the model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersPass
Destructive tools are labelledNot checked
Remote endpoint answers the MCP handshakeNot checked

README

View on GitHub

Vantio

Linux security for AI.

This repository contains Vantio Optics, the Phantom Engine installer, and the Python SDK.

Vantio Optics (Open Core)

Free, local-first observability for AI egress. Optics is the free Observe tier. It records the destination, the process, the size, and the timing of a supported outbound call. Does not block actions or retain prompts or completions.

The Optics home is moving to github.com/vantioai/vantio-optics. Publishing still runs from this repository. The editor extension stays at extensions/vantio-optics. Commands and local install notes are in extensions/vantio-optics/README.md.

Install

These are the versions npm and PyPI served on 2026-10-21. Manifests in this git tree can be newer than the registry.

Package	Registry	Version
`@vantio/cli`	npm	0.3.24
`@vantio/agent-sdk`	npm	0.2.4
`vantio-agent-sdk`	PyPI	3.1.1
`@vantio/optics-mcp`	npm	0.1.2
`@vantio/gate-mcp`	npm	0.1.0

@vantio/gate-mcp is a compatibility package for an older integration.

Optics CLI, on macOS, Linux, and Windows (WSL):

npm install -g @vantio/cli@0.3.24
vantio run node agent.js

vantio run injects the Node interceptor with NODE_OPTIONS --require for node, npx, tsx, and ts-node. On Node it covers fetch, undici, http/https, http2, net/tls, WebSocket, and spawned curl or wget.

Python SDK:

pip install vantio-agent-sdk==3.1.1

Wrap a Python callable with @shield. Prefixing vantio run python does not intercept by itself.

Node SDK:

npm install @vantio/agent-sdk@0.2.4

The Node SDK exposes shield(). Outbound Node coverage comes from vantio run.

Optics MCP:

npm install @vantio/optics-mcp@0.1.2

Free Optics needs no account and no API key.

Browser paths stay outside this wrap.

A process can miss the wrapper when it opens a socket the Node interceptor does not see, starts a subprocess outside vantio run, or uses a runtime other than Node without the Python SDK. Optics records the paths it wrapped.

vantio coverage prints the processes and connections recorded on this system, and which of those paths are on a local allowlist. vantio destinations flags the first time a recorded program connects to a destination that is not on that list. vantio export sends those events as OTLP/HTTP JSON, syslog or JSON lines, or a webhook. Optics does not stop the call.

Telemetry is disabled by default. Set VANTIO_TELEMETRY=1 to opt in. VANTIO_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 override that opt-in.

Phantom Engine installer

Phantom Engine is enforcement and control for enrolled Linux systems. Contact Vantio. The product page is vantio.ai/phantom-engine.

The installer source is packages/vantio-install. vantio-install is not on npm or PyPI. Operator install uses the sealed wheel described in packages/vantio-install/docs/QUICKSTART.md. The commands are vantio-install and vantio-verify. That install does not replace @vantio/cli. The installer notes in that package target Ubuntu 24.04 LTS on x86_64.

Documentation

Site: vantio.ai
Docs: vantio.ai/docs
Optics: vantio.ai/optics
Phantom Engine: vantio.ai/phantom-engine
CLI: packages/vantio-cli/README.md
Python SDK: packages/vantio-agent-sdk-py/README.md
Editor extension: extensions/vantio-optics/README.md

License

@vantio/cli, @vantio/agent-sdk, and vantio-agent-sdk declare MIT. License files for the CLI and the Python SDK are packages/vantio-cli/LICENSE and packages/vantio-agent-sdk-py/LICENSE. The Node SDK declares MIT in packages/vantio-agent-sdk/package.json. There is no root LICENSE file. The MIT grant covers the published packages named here.

Security

Report a suspected vulnerability to security@vantio.ai. The process is SECURITY.md.

Contributing

See CONTRIBUTING.md and CODE_OF_CONDUCT.md.

Read full README

Vantio Gate MCP questions

How do I add Vantio Gate MCP to Claude Code?

Run claude mcp add --env VANTIO_API_KEY=<YOUR_VANTIO_API_KEY> vantio-open-core -- npx -y @vantio/gate-mcp in your terminal. Add --scope user to make it available in every project.

How do I add Vantio Gate MCP to Cursor?

Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.

Does using Optics require an account or API key?

No, the free version of Optics does not require an account or an API key.

Can Vantio Optics block outbound calls?

No, Optics is an observability tool that records outbound call details but does not block actions.

Facts

Nov 14, 2026

Stars: 2
Downloads, 30 days: —
Latest version: 0.1.0
Last commit: Nov 13, 2026
License: —
Transport: stdio
Package: @vantio/gate-mcp

vantioai ↗

Community publisher

Published by an independent maintainer.

Alternatives

Works with

Claude Code Cursor VS Code Claude Desktop Codex Gemini CLI Windsurf Devin

Badge for your README

Show your HostedMCP checks score. The badge links readers to install instructions for every client.

[![HostedMCP checks](https://api.hostedmcp.org/v1/badge/server/vantioai/vantio-open-core.svg)](https://hostedmcp.org/servers/vantioai/vantio-open-core/checks)

Maintainer?

Claim this listing to edit it and add the HostedMCP badge to your README.

Claim listing

Before you install

Servers run with the permissions you give them. Use the narrowest token or database role that does the job.

About Vantio Gate MCP server

What you can do with it

1Monitor outbound AI trafficAn AI client can track the destination and timing of every outbound call made by a process.
2Audit network allowlistsA developer can check which recorded processes and connections are currently permitted by a local allowlist.
3Identify unauthorized destinationsThe system can flag when a program connects to a destination that has not been previously recorded on the allowlist.
4Export security telemetrySecurity events can be sent to external systems using various formats like webhooks or syslog.

Written from the project's README. Every use case is checked against a quote from it.

{ "mcpServers": { "vantio-open-core": { "command": "npx", "args": [ "-y", "@vantio/gate-mcp" ], "env": { "VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>" } } } }

{ "servers": { "vantio-open-core": { "type": "stdio", "command": "npx", "args": [ "-y", "@vantio/gate-mcp" ], "env": { "VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>" } } } }

{ "mcpServers": { "vantio-open-core": { "command": "npx", "args": [ "-y", "@vantio/gate-mcp" ], "env": { "VANTIO_API_KEY": "<YOUR_VANTIO_API_KEY>" } } } }

Configuration

VANTIO_API_KEYSecret

Optional Pro API key for gate_get_policy / gate_residual_risk against your control plane

VANTIO_API_BASE

Optional Pro API base URL (default https://api.vantio.ai)

Name	Description
VANTIO_API_KEY	Optional Pro API key for gate_get_policy / gate_residual_risk against your control plane	Secret
VANTIO_API_BASE	Optional Pro API base URL (default https://api.vantio.ai)

Package

Registry

Version

@vantio/cli

npm

0.3.24

@vantio/agent-sdk

npm

0.2.4

vantio-agent-sdk

PyPI

3.1.1

@vantio/optics-mcp

npm

0.1.2

@vantio/gate-mcp

npm

0.1.0

Vantio Gate MCP questions

How do I add Vantio Gate MCP to Claude Code?

Run claude mcp add --env VANTIO_API_KEY=<YOUR_VANTIO_API_KEY> vantio-open-core -- npx -y @vantio/gate-mcp in your terminal. Add --scope user to make it available in every project.

How do I add Vantio Gate MCP to Cursor?

Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.

Does using Optics require an account or API key?

No, the free version of Optics does not require an account or an API key.

Can Vantio Optics block outbound calls?

No, Optics is an observability tool that records outbound call details but does not block actions.

Vantio Gate MCP server

What is Vantio Gate MCP?

About Vantio Gate MCP server

What you can do with it

How to install Vantio Gate MCP

Install Vantio Gate MCP in Claude Code

Install Vantio Gate MCP in Cursor

Install Vantio Gate MCP in VS Code

Install Vantio Gate MCP in Claude Desktop

Install Vantio Gate MCP in Codex

Install Vantio Gate MCP in Gemini CLI

Configuration

Automated checks

README

Vantio

Vantio Optics (Open Core)

Install

Phantom Engine installer

Documentation

License

Security

Contributing

Vantio Gate MCP questions

Vantio Gate MCP server

What is Vantio Gate MCP?

About Vantio Gate MCP server

What you can do with it

How to install Vantio Gate MCP

Install Vantio Gate MCP in Claude Code

Install Vantio Gate MCP in Cursor

Install Vantio Gate MCP in VS Code

Install Vantio Gate MCP in Claude Desktop

Install Vantio Gate MCP in Codex

Install Vantio Gate MCP in Gemini CLI

Configuration

Automated checks

README

Vantio

Vantio Optics (Open Core)

Install

Phantom Engine installer

Documentation

License

Security

Contributing

Vantio Gate MCP questions