One gateway in front of every MCP server your agents can reach. A server that changes after you approved it is caught, the call is blocked before it runs, and nothing leaves your machine.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add mcpgawk -- uvx mcpgawk~/.codex/config.toml
[mcp_servers.mcpgawk]
command = "uvx"
args = ["mcpgawk"]
# codex mcp add mcpgawk -- uvx mcpgawk~/.cursor/mcp.json
{
"mcpServers": {
"mcpgawk": {
"command": "uvx",
"args": [
"mcpgawk"
]
}
}
}.vscode/mcp.json
{
"servers": {
"mcpgawk": {
"type": "stdio",
"command": "uvx",
"args": [
"mcpgawk"
]
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"mcpgawk": {
"command": "uvx",
"args": [
"mcpgawk"
]
}
}
}claude_desktop_config.json
{
"mcpServers": {
"mcpgawk": {
"command": "uvx",
"args": [
"mcpgawk"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"mcpgawk": {
"command": "uvx",
"args": [
"mcpgawk"
]
}
}
}