Sentinelgate

概述

SentinelGate 是一个 AI 代理的访问控制系统，在执行前拦截所有操作。它作为带有策略决策点的 MCP 代理工作，使用 CEL 策略和 RBAC 来允许或拒绝工具调用、Shell 命令和文件操作。该系统提供确定性安全控制，并维护完整的代理活动审计记录。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• read_filepath: string

  Read a file from the filesystem

  试试:Read the contents of config.json试试:Show me the content of /home/user/file.txt
• write_filepath: string, content: string

  Write content to a file

  试试:Create a new file with this content试试:Write to log.txt with timestamp
• list_filespath: string

  List files and directories in a path

  试试:Show all files in the current directory试试:List files in /home/user/docs
• execute_bashcommand: string

  Execute a bash command

  试试:Run 'ls -la' to list files试试:Execute 'git status' to check repository state
• make_http_requestmethod: string, url: string, headers: object, body: string

  Make an HTTP request to a web service

  试试:Fetch data from https://api.example.com试试:Send a POST request to the webhook endpoint
• delete_filepath: string

  Delete a file from the filesystem

  试试:Remove the temporary file试试:Delete the old log file
• create_directorypath: string

  Create a new directory

  试试:Make a new folder called 'backup'试试:Create directory structure for project
• rename_filesource: string, destination: string

  Rename or move a file

  试试:Rename config to config.backup试试:Move the file to the documents folder
• get_file_infopath: string

  Get metadata information about a file

  试试:Check when the file was last modified试试:Get the size of the document
• search_filespath: string, pattern: string

  Search for files matching a pattern

  试试:Find all .txt files in the directory试试:Search for files containing 'error' in the name
• compress_filesfiles: array, output: string

  Compress multiple files into an archive

  试试:Zip all log files together试试:Create a backup archive of project files
• decompress_filearchive: string, destination: string

  Decompress an archive to a destination directory

  试试:Extract the downloaded zip file试试:Unpack the archive to the folder

说明：Tool names inferred from the MCP proxy behavior described in the README, as the README doesn't explicitly list all available tools but mentions '12 discovered' tools in the example startup output. The tools are common file system and system

可对比工具

安装

curl -sSfL https://raw.githubusercontent.com/Sentinel-Gate/Sentinelgate/main/install.sh | sh

irm https://raw.githubusercontent.com/Sentinel-Gate/Sentinelgate/main/install.ps1 | iex

{
  "mcpServers": {
    "sentinelgate": {
      "command": "sentinelgate",
      "args": ["serve"]
    }
  }
}

FAQ

SentinelGate 与普通防火墙有什么不同？

SentinelGate 在应用层专门针对 AI 代理操作运行，理解工具调用和内容等上下文，而不仅仅是网络流量。

它需要修改我的 AI 代理吗？

不需要。SentinelGate 作为代理在 AI 代理和您的系统之间工作，无需对代理本身进行任何代码更改。

Hacker News 讨论

开发者社区最近的相关讨论。

• Show HN: SentinelGate – Access control for AI agents (open-source MCP proxy)▲ 6
  帖子 by andreadev · 2026-03-26
• Show HN: SentinelGate – Universal Firewall for AI Agents (Open Source, Go)▲ 2💬 1
  帖子 by andreadev · 2026-02-18
• Show HN: Sentinel Gate – Open-source RBAC firewall for MCP agents▲ 2💬 1
  帖子 by andreadev · 2026-02-03

Sentinelgate 对比