verity-gate 0.2.0 ships its agent action-vetting gate as MCP servers for pip and npm
W1RELESS · reddit · 2026-11-10
An indie developer released verity-gate 0.2.0, turning the Verity gate into MCP servers (pip + npm). Verity is an external service that vets each proposed agent action before execution and returns ALLOW / VETO / ESCALATE with signed, hash-chained receipts — the agent proposes; something it doesn't control disposes.
What's new: under MCP hosts like Claude Desktop, Claude Code, and Cursor, it's a config block away, exposing four tools (verityverdict, verityattest, veritychainverify, verityhealth). Python: pip install verity-gate, run verity-gate-mcp.
Two unbending design rules:
- Keys come from the operator via environment — never from the agent or as tool arguments, otherwise the agent grades its own homework.
- Enforcement fails closed; shadow mode fails open.
Free 30-day shadow keys are available, with six suggested test calls (canary read, backup purge, a $5,000 payout, /etc/passwd, record deletion, a 35-call burst) and a publicly verifiable receipt chain. Built by one person in Bloomington, Indiana, over the past month.
More from coding & agent
- Elastic TTS: custom text-to-speech engine coded by Gemini 4 Argon — alexanderchen · 2026-11-10
- 'Proof-of-Agent' mining: one user runs POA across Hermes, OpenClaw, Grok Bot and Muse — adamamcbride · 2026-11-10
- Vercel MCP opens to all clients via Client ID Metadata Documents, ending allowlist friction — steren · 2026-11-10
- User Lets Fable 5.2 Max 'Do Whatever It Wants' — It Keeps Working for Over an Hour — mallow610 · 2026-11-10
- Simon Willison vibe-codes a Beep Locator with Claude Code to triangulate a mystery beep using five devices — RealGeneKim · 2026-11-10
- Free MCP server vulnerable.now merges CVE data from 8 sources, no API key — Mistilziela · 2026-11-10