x=hub

your toolset

    build deployment
    sign in

    Yagami AI Context Firewall

    mcpkey · package
    io.github.MatthewTracy/yagami · v0.8.3
    deploy just this

    Open-source AI context firewall for governed model, retrieval, memory, and tool access.

    run it

    on your own machines, one way per deploy method
    generated from the record, not tested yet
    A package that serves HTTP itself; the port comes from its URL template.
    #!/usr/bin/env bash
# yagami (io.github.MatthewTracy/yagami), recipe baremetal (generated).
# Generated by Hub for toolset "my-agent"; started by mcp-my-agent-yagami.service.
set -euo pipefail
export HOST=127.0.0.1 PORT=8101
exec uvx yagami==0.8.3

[Unit]
Description=MCP server yagami (toolset my-agent), generated by Hub
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=mcp
Group=mcp
EnvironmentFile=/etc/mcp/my-agent.env
Environment=HOME=/var/lib/mcp/yagami
WorkingDirectory=/var/lib/mcp/yagami
ExecStart=/opt/mcp/my-agent/bin/yagami.sh
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/mcp/yagami

[Install]
WantedBy=multi-user.target

    connect to it

    copy what your client needs
    {
  "mcpServers": {
    "yagami": {
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    #!/usr/bin/env bash
# Registers every server with Claude Code (run once; `claude mcp list` to check).
set -euo pipefail
set -a; [ -f .env ] && source .env; set +a
claude mcp add yagami -- CHANGE_ME

    {
  "mcpServers": {
    "yagami": {
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    {
  "servers": {
    "yagami": {
      "type": "stdio",
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    name: my-agent
target: local
servers:
- hub: io.github.MatthewTracy/yagami
    • not probed yet: tools unpinned, ingest lists them
    • a package that serves HTTP itself: pick a self-hosted target, not 'local'

    tools

    Not probed yetThe tools appear once the hub or its worker has listed this entry. Running it still works: your client lists them on first start.