门槛

Uninstallation

gate uninstall
brew uninstall gate

gate uninstall removes gate hooks from all harnesses, the config directory at ~/.config/gate/, and any gate-generated plugin files. It shows what will be deleted and asks for confirmation.

Quickstart

1. Install gate

   # Homebrew — macOS and Linux (recommended)
   brew tap GaaraZhu/gate && brew install gate

   # cargo binstall — downloads a prebuilt binary
   cargo binstall gate

   # Or grab a binary from the releases page
   # https://github.com/GaaraZhu/gate/releases
   

1. Create your config (opens ~/.config/gate/config.yaml in your editor):

   gate config
   

1. Register the hook with your agent harness:

   # Claude Code (default)
   gate init

   # OpenCode
   gate init --harness opencode

   # Cursor
   gate init --harness cursor

   # GitHub Copilot CLI (project-scoped, run from repo root)
   gate init --harness copilot-cli

   # Codex CLI
   gate init --harness codex
   

Add --scope project for project-only setup. Restart your OpenCode or Cursor session after gate init to load the hook. For Codex CLI, restart the session, then review the hook in the Trust & Permissions UI, mark it as trusted, and enable it. For Copilot CLI, the generated .github/hooks/PreToolUse.json is gitignored by default — each developer runs gate init --harness copilot-cli once in their local clone.

1. (Optional) Register MCP server proxies so tools/call responses also pass through gate:

   # Claude Code (default) — dry-run, shows what would change
   gate init --wrap-mcp

   # OpenCode
   gate init --harness opencode --wrap-mcp --yes

   # Cursor
   gate init --harness cursor --wrap-mcp --yes

   # Copilot CLI
   gate init --harness copilot-cli --wrap-mcp --yes

   # Codex CLI
   gate init --harness codex --wrap-mcp --yes
   

Add --scope project for project-level MCP config. For Cursor project-scoped MCP, re-enable the servers in Settings → Tools & MCPs after registration. See docs/mcp.md for --servers, per-harness paths, and manual single-server registration.

1. Start your AI session — gate intercepts query commands automatically. No changes to your prompts or tools required.

Run gate validate to confirm your config is valid before the first session.

Demo

The demo walks through three steps:

1. gate scan detecting PII columns across the schema before any query runs
2. An agent querying the transactions table with gate disabled — card_number fully visible
3. The same queries with gate enabled — card_number redacted across both MCP and Bash paths

Also works with OpenCode, Cursor, GitHub Copilot CLI, and Codex CLI — see Supported AI Tools for the full compatibility matrix.

For the design rationale, threat-model walkthrough, and detection-pipeline deep dive, read Introducing gate.

Config file protection (Unix only)

For a stronger guarantee, transfer ownership of the config to root so the agent cannot modify it:

sudo gate protect      # any future enable/disable/config/allowlist now needs sudo
sudo gate unprotect    # restore direct write access

Enforced at the OS level across all harnesses (Claude Code, OpenCode, Cursor, GitHub Copilot CLI, Codex CLI). Not supported on Windows.