x=hub

your toolset

    build deployment
    sign in

    mcp-airlock

    mcpkey · package
    io.github.Shalimov04/mcp-airlock · v0.2.0
    deploy just this

    Governance proxy for MCP servers: allowlist, forced dry run, human confirmation, blast radius, audit

    run it

    on your own machines, one way per deploy method
    generated from the record, not tested yet
    A package that serves HTTP itself; the port comes from its URL template.
    # once, as root:
# as_mcp DIR COMMAND...: runs COMMAND as the mcp user in DIR, its home, sandboxed as the
# units are: a package's install scripts can write to DIR only, as the server later can
as_mcp() {
  local dir="$1"; shift
  systemd-run --quiet --wait --pipe --collect --uid=mcp --gid=mcp \
    -p WorkingDirectory="$dir" -p Environment=HOME="$dir" -p ReadWritePaths="$dir" \
    -p NoNewPrivileges=true -p ProtectSystem=strict -p ProtectHome=true -p PrivateTmp=true \
    -- "$@" </dev/null
}
install -d -m 0750 -o mcp -g mcp /var/lib/mcp/airlock
# airlock: its packages, installed whole before its unit starts (no session installs)
systemctl stop mcp-my-agent-airlock.service 2>/dev/null || true
as_mcp /var/lib/mcp/airlock uv tool install mcp-airlock==0.2.0

#!/usr/bin/env bash
# airlock (io.github.Shalimov04/mcp-airlock), recipe baremetal (generated).
# Generated by Hub for toolset "my-agent"; started by mcp-my-agent-airlock.service.
set -euo pipefail
export HOST=127.0.0.1 PORT=8101
exec uvx mcp-airlock==0.2.0

[Unit]
Description=MCP server airlock (toolset my-agent), generated by Hub
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=mcp
Group=mcp
EnvironmentFile=/etc/mcp/my-agent.env
Environment=HOME=/var/lib/mcp/airlock
WorkingDirectory=/var/lib/mcp/airlock
ExecStart=/opt/mcp/my-agent/bin/airlock.sh
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/mcp/airlock

[Install]
WantedBy=multi-user.target

    connect to it

    copy what your client needs
    {
  "mcpServers": {
    "airlock": {
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    #!/usr/bin/env bash
# Registers every server with Claude Code (run once; `claude mcp list` to check).
set -euo pipefail
set -a; [ -f .env ] && source .env; set +a
claude mcp add airlock -- CHANGE_ME

    {
  "mcpServers": {
    "airlock": {
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    {
  "servers": {
    "airlock": {
      "type": "stdio",
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    name: my-agent
target: local
servers:
- hub: io.github.Shalimov04/mcp-airlock
    • not probed yet: tools unpinned, ingest lists them
    • a package that serves HTTP itself: pick a self-hosted target, not 'local'

    tools

    Not probed yetThe tools appear once the hub or its worker has listed this entry. Running it still works: your client lists them on first start.