gate

KO | EN

gitlite — search

#vue #agents #windows #command-line #animation #markdown #security #kubernetes #privacy #cli

(★ 9)

Spel Gate : your local MCP Gateway

File Explorer

ZIP Download

- - ci.yml
  - pr-body.yml
  - release.yml
- PULL_REQUEST_TEMPLATE.md
- .env.example
- mcp.json.example
- tools.toml.example
- - chatgpt-new-plugin-form.webp
  - chatgpt-plugins-add-button.webp
  - mcp-icon.png
  - realtime-calls.webp
  - vision.webp
- installation.md
- wsl-installation.md
- change-ngrok-token.sh
- count_conversation_tools.py
- install-wsl.sh
- validate_pr_body.py
- - __init__.py
  - __main__.py
  - changelog.py
  - clipboard.py
  - config.py
  - connect.py
  - doctor.py
  - integrity.py
  - log_viewer.py
  - logs.py
  - main.py
  - migrations.py
  - paths.py
  - release_flow.py
  - remote.py
  - state.py
  - uninstall.py
  - updater.py
  - versioning.py
- - command-guard.css
  - command-guard.js
  - gate.svg
  - index.html
  - trajectory.css
  - trajectory.js
- - chatgpt-tools.user.js
- activity_monitor.py
- blocking_command_runner.py
- changelog_parser.py
- command_guard.py
- command_guard_config.py
- command_guard_web.py
- command_queue.py
- dcg_installer.py
- environment_config.py
- gate_tool_catalog.py
- gateway_port.py
- http_activity_monitor.py
- interactive_launcher.py
- lightweight_oauth.py
- mcp_discovery_tools.py
- mcp_gateway.py
- mcp_proxy.py
- mcp_registry.py
- ngrok_target.py
- oauth_access_gate.py
- oauth_resource_metadata.py
- realtime_calls.py
- realtime_web.py
- request_body_limit.py
- runtime_features.py
- secret_redactor.py
- skill_catalog.py
- skill_writer.py
- terminal_app.py
- terminal_rendering.py
- tool_metadata.py
- tool_registry.py
- tunnel_provider.py
- __init__.py
- command_guard_ui_behavior.test.js
- conftest.py
- realtime_ui_behavior.test.js
- test_activity_monitor.py
- test_blocking_command_runner.py
- test_command_guard.py
- test_command_guard_config.py
- test_command_guard_integration.py
- test_command_guard_web.py
- test_command_queue.py
- test_conversation_logging.py
- test_count_conversation_tools.py
- test_dcg_installer.py
- test_gate_cli.py
- test_gate_cli_connect.py
- test_gate_connect.py
- test_gate_environment.py
- test_gate_integrity.py
- test_gate_log_viewer.py
- test_gate_management.py
- test_gate_paths.py
- test_gate_release_assets.py
- test_gate_release_flow.py
- test_gate_remote_update.py
- test_gate_runtime_paths.py
- test_gate_state.py
- test_gate_updater.py
- test_gate_version.py
- test_gateway_lifespan.py
- test_gateway_port.py
- test_installer.py
- test_interactive_browser.py
- test_interactive_launcher.py
- test_mcp_endpoint.py
- test_mcp_proxy.py
- test_mcp_registry.py
- test_ngrok_target.py
- test_oauth.py
- test_oauth_access_secret.py
- test_oauth_resource_metadata.py
- test_project_rename.py
- test_proxy_command_guard.py
- test_realtime_calls.py
- test_realtime_web.py
- test_release_please.py
- test_run_command_conversation.py
- test_run_command_integration.py
- test_run_onboarding.py
- test_run_powershell.py
- test_runtime_features.py
- test_runtime_modes.py
- test_skill_catalog.py
- test_skill_writer.py
- test_start_services.py
- test_start_services_bootstrap.py
- test_terminal_app.py
- test_terminal_app_protocol.py
- test_terminal_rendering.py
- test_tool_registry.py
- test_tunnel_provider.py
- test_validate_pr_body.py
- test_windows_launcher.py
.coverage
.gitignore
.jscpd.json
.release-please-manifest.json
AGENTS.md
CHANGELOG.md
install.sh
package-lock.json
package.json
pytest.ini
README.md
release-please-config.json
requirements.txt
run.ps1
run.sh
start_services.py
VERSION

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Version

File

Link

Example

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

Gate is a local MCP reverse proxy that exposes your computer, MCP servers and Agent Skills through a single OAuth-protected endpoint. It lets ChatGPT reach tools running on your own machine from the web app and iOS apps, without moving the underlying services into the cloud.

Use Gate to connect local commands, files, browser automation, custom MCP servers and a trusted Skills catalogue back to your regular ChatGPT conversations.

## Installation and usage

Install Gate on macOS, Linux or WSL:

```bash
curl -fsSL https://spel.cc/gate.sh | bash
```

Then:

1. Run Gate:

```bash
   gate
   ```

On first setup, choose how Gate is exposed publicly: **ngrok**, **Tailscale Funnel**, or **Cloudflare Tunnel**. Gate prints the public MCP URL when it starts.

2. Open [ChatGPT settings](https://chatgpt.com/#settings/Personalization) and enable **Developer mode** under **Apps → Advanced settings**. Then [create a custom MCP app directly in ChatGPT](https://chatgpt.com/plugins#settings/Connectors?create-connector=true&redirectAfter=%2Fplugins) using the `/mcp` URL printed by Gate. See the [detailed setup guide](docs/installation.md#12-add-the-mcp-dl-plugin) if needed. As long as Gate is running, ChatGPT can call it from chats where the app is enabled.

Public endpoints:

- `<public-url>/mcp` — MCP connector
- `<public-url>/oauth` — OAuth discovery and authorization
- `<public-url>/rt` — authenticated real-time calls interface

![Gate real-time calls interface](https://raw.githubusercontent.com/spelcc/gate/main/docs/assets/realtime-calls.webp)

See the **[installation and usage guide](docs/installation.md)**, if you want to do it the hard way.

---

## 🛠️ Available MCP Tools

Gate starts in **discover mode**. Only eight tools are exposed by default:

| Tool | Description |
| --- | --- |
| `run_command` | Execute a local shell command |
| `skills_search` | Search the local Agent Skills catalogue |
| `skills_read` | Read a selected Agent Skill |
| `skills_create` | Create a validated local Agent Skill package |
| `mcp_servers_list` | List downstream MCP servers, or refresh their registry |
| `mcp_tools_search` | Search tools across downstream MCP servers |
| `mcp_tool_read` | Load the schema for one discovered MCP tool |
| `mcp_tool_call` | Invoke one discovered MCP tool |

Additional first-party tools and runtime-specific helpers may be available outside this default surface. See the [installation and usage guide](docs/installation.md#configure-the-gateway) for exposure modes and configuration.

### 🔌 Configurable MCP subservers

Gate uses **discovery mode by default** so large downstream MCP catalogues do not flood ChatGPT's initial tool context.

Downstream tools from `config/mcp.json` remain connected and searchable. Use `mcp_tools_search` to find one, including by its former `prefix_tool` public name, `mcp_tool_read` to load its schema, then `mcp_tool_call` to invoke it. Detailed exposure-mode and queue behavior lives in the [installation guide](docs/installation.md#configure-the-gateway).

[See more about the MCP implementation and subserver configuration.](docs/installation.md#configure-mcp-subservers)

### 🧠 Agent Skills

Gate can expose a trusted local catalogue of [Agent Skills](https://agentskills.io/) through `skills_search`, `skills_read`, and `skills_create`. Skills remain stored on your machine and can be discovered from ChatGPT without being bundled into the gateway or automatically injected into every conversation.

[See how to configure the Skills catalogue.](docs/installation.md#agent-skills-catalogue)

---

## ⚠️ Security

- `run_command` can execute local shell commands, so Gate applies a built-in destructive-command safeguard before process creation
- OAuth tokens are signed with a local RSA key (generated in `data/oauth_private_key.pem`)
- Files shared via `public_file_share` are accessible without authentication
- Command logs contain all input/output — do not expose logs
- The authenticated `/rt` inspector captures redacted tool details by default. Set
  `GATE_REALTIME_CAPTURE_RAW_DATA=false` for metadata-only monitoring when calls
  may contain secrets Gate cannot identify automatically

### 🛡️ Optional advanced safeguard

Gate blocks common destructive filesystem, Git, Docker, database, Kubernetes, Terraform, disk, PowerShell, cmd and WSL operations by default.

For broader protection, choose **2. Destructive Command Guard (dcg)** during Gate setup. This is a one-click install: Gate downloads the pinned [Destructive Command Guard](https://github.com/Dicklesworthstone/destructive_command_guard) release, verifies its SHA256 checksum and version, and falls back safely to the built-in guard if installation fails.

[Read the command safeguard documentation.](docs/installation.md#destructive-command-guard)

## 📝 License

This project is licensed under the MIT License.

gate

File Explorer

# Use via CDN

Was this content helpful?

Recent Feedback

Download README