AffixIO/affixio-mcp-gateway

AffixIO MCP Gateway (Model repo)

Use the AffixIO MCP server (@affixio/mcp) as the policy gate in front of every privileged agent tool call — Claude Desktop, Cursor, or any MCP client. PII never leaves the host: only SHA-256 arg digests are kept.

Install (real server, Node 20+)

npm i -g @affixio/mcp
affixio-mcp probe

Client config

Copy claude-desktop-mcp.json (Claude Desktop) or cursor-mcp.json (Cursor) into your MCP client config. Both ship here with a demo policy: 5 allow-listed tools, 500 GBP cap, secret patterns blocked, offline key local_operator.

Tools (3, local stdio)

• attest_action — record a local action, get a signed yes/no attestation.
• verify_action — check an attestation, get valid true/false + reason.
• gate_tool_call — pre-check before a privileged tool call; allow/deny.

Try the policy without Node

gateway.py mirrors the server's fail-closed logic dependency-free:

python test_gateway.py

Env

AFFIX_API_KEY (default local_operator = offline), AFFIX_MCP_HOME, AFFIX_MCP_AGENT_ID, AFFIX_MCP_ALLOWED_TOOLS, AFFIX_MCP_MAX_AMOUNT, AFFIX_MCP_CURRENCY, AFFIX_MCP_BLOCKED_PATTERNS. Full table in the npm README: https://github.com/AffixIO/affixio-mcp

Version

• v1.0.0 — gateway policy mirror + client configs. See CHANGELOG.md.

Links

• Product: https://www.affix-io.com
• MCP package: https://github.com/AffixIO/affixio-mcp
• SDK: https://www.npmjs.com/package/affixio
• API docs: https://www.affix-io.com/docs/
• Agentic Pay Kit: https://www.affix-io.com/agent-trust/

Keywords: AI agents, agentic workflows, MCP, model context protocol, agent verification, tool calling, local AI.