Sunaiva Gate — Agent Rule Enforcement
by sunaivacore.io · remote · local (npm) · no sign-in to list tools · v2.0.4 · published by io.sunaivacore
MCP enforcement layer that intercepts AI agent actions and blocks rule violations before execution.
Deletes · 2Changes · 7
16 tools: 2 can delete or cancel things, 7 change things and 7 only read.
Scanned Oct 21, 2026
- Deletes or cancels2Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things7Claude Code: ask: see these tools
- Only reads7Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http gate https://mcp.sunaivacore.ioTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
16 tools
Deletes or cancels 2Claude Code: deny
delete_custom_ruleDelete a custom rule.No findings
Why it is in this group
- The name "delete_custom_rule" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete a custom rule. Requires API key (Pro+).
reset_rule_modeRemove a mode override for a rule, reverting it to its default enforcement mode.No findings
Why it is in this group
- The name "reset_rule_mode" says "reset": a word for a change.
- The description's first verb is "remove": a word for removing or ending something.
Description, as the server wrote it Remove a mode override for a rule, reverting it to its default enforcement mode. Requires API key (Pro+).
Changes things 7Claude Code: ask
add_custom_ruleCreate a custom detection rule in the backend.No findings
Why it is in this group
- The name "add_custom_rule" says "add": a word for a change.
Description, as the server wrote it Create a custom detection rule in the backend. Requires API key (Pro+).
apply_presetApply a preset bundle, activating all its included rules.No findings
Why it is in this group
- The name "apply_preset" says "apply": a word for a change.
Description, as the server wrote it Apply a preset bundle, activating all its included rules. Requires API key (Pro+).
audit_verify[Planned — not yet implemented on the remote endpoint, returns NOT_IMPLEMENTED] Forward-linked hash-chain / ed25519 audit-log verification is not yet built in this backend.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it [Planned — not yet implemented on the remote endpoint, returns NOT_IMPLEMENTED] Forward-linked hash-chain / ed25519 audit-log verification is not yet built in this backend.
set_rule_modeSet enforcement mode (shadow/advisory/enforce) for a specific rule.No findings
Why it is in this group
- The name "set_rule_mode" says "set": a word for a change.
Description, as the server wrote it Set enforcement mode (shadow/advisory/enforce) for a specific rule. Requires API key (Pro+).
ship_confidence_check[Planned — not yet implemented on the remote endpoint, returns NOT_IMPLEMENTED] Ship Confidence Gate (Rule 42) dual-tier authorization is not yet built in this backend.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it [Planned — not yet implemented on the remote endpoint, returns NOT_IMPLEMENTED] Ship Confidence Gate (Rule 42) dual-tier authorization is not yet built in this backend.
update_custom_ruleUpdate an existing custom rule.No findings
Why it is in this group
- The name "update_custom_rule" says "update": a word for a change.
Description, as the server wrote it Update an existing custom rule. Requires API key (Pro+).
update_rules[Planned — not yet implemented on the remote endpoint, returns NOT_IMPLEMENTED] Enable/disable is not backed by any route in this API; use set_rule_mode (shadow/advisory/enforce) i…No findings
Why it is in this group
- The name "update_rules" says "update": a word for a change.
Description, as the server wrote it [Planned — not yet implemented on the remote endpoint, returns NOT_IMPLEMENTED] Enable/disable is not backed by any route in this API; use set_rule_mode (shadow/advisory/enforce) instead, or the local `npx @sunaiva/gate` package.
Only reads 7Claude Code: allow
get_audit_logView recent gate decisions — blocks, warnings, passes, and bypasses.No findings
Why it is in this group
- The name "get_audit_log" says "get": a word for reading.
Description, as the server wrote it View recent gate decisions — blocks, warnings, passes, and bypasses.
get_rule_modesList all enforcement-mode overrides configured for the authenticated customer.No findings
Why it is in this group
- The name "get_rule_modes" says "get": a word for reading.
Description, as the server wrote it List all enforcement-mode overrides configured for the authenticated customer. Requires an account (Dev+).
get_rulesList active validation rules — the customer's TRUE enforced set (constitutional + recommended-default metadata on dev tier, all 69 premium rules on pro+).No findings
Why it is in this group
- The name "get_rules" says "get": a word for reading.
Description, as the server wrote it List active validation rules — the customer's TRUE enforced set (constitutional + recommended-default metadata on dev tier, all 69 premium rules on pro+). `category`/`preset` filter args are accepted but not applied server-side.
list_custom_rulesList all custom rules for the authenticated customer.No findings
Why it is in this group
- The name "list_custom_rules" says "list": a word for reading.
Description, as the server wrote it List all custom rules for the authenticated customer. Requires API key (Pro+).
list_presetsList available rule preset bundles.No findings
Why it is in this group
- The name "list_presets" says "list": a word for reading.
Description, as the server wrote it List available rule preset bundles. Requires API key (Dev+).
log_bypassRecord an intentional rule bypass with justification.No findings
Why it is in this group
- The name "log_bypass" says "log": a word for reading.
Description, as the server wrote it Record an intentional rule bypass with justification. Cannot bypass constitutional rules.
validate_actionCheck if a proposed action passes all active validation rules.No findings
Why it is in this group
- The name "validate_action" says "validate": a word for reading.
Description, as the server wrote it Check if a proposed action passes all active validation rules. Returns allowed/blocked with rule violations.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 2.0.4. Values in angle brackets are yours to fill in.
claude mcp add --transport http gate https://mcp.sunaivacore.ioRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__gate__validate_action",
"mcp__gate__log_bypass",
"mcp__gate__get_rules",
"mcp__gate__get_audit_log",
"mcp__gate__get_rule_modes",
"mcp__gate__list_custom_rules",
"mcp__gate__list_presets"
],
"ask": [
"mcp__gate__update_rules",
"mcp__gate__ship_confidence_check",
"mcp__gate__audit_verify",
"mcp__gate__set_rule_mode",
"mcp__gate__add_custom_rule",
"mcp__gate__update_custom_rule",
"mcp__gate__apply_preset"
],
"deny": [
"mcp__gate__reset_rule_mode",
"mcp__gate__delete_custom_rule"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as gate. Review it before you use it.