Skip to content
mcp/harbor
Windsurf

gatekeeper for Windsurf

io.github.runestone-labs/gatekeeper

Run MCP tool calls through Runestone Gatekeeper — policy enforcement, human approval, audit.

client:Windsurf transport:stdio runtime:npm

Install gatekeeper in Windsurf

~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json

Held in this page only — never stored, logged, or sent anywhere but back to your screen. 

{
  "mcpServers": {
    "gatekeeper": {
      "command": "npx",
      "args": [
        "-y",
        "@runestone-labs/gatekeeper-mcp"
      ],
      "env": {
        "GATEKEEPER_ROLE": "<GATEKEEPER_ROLE>",
        "GATEKEEPER_URL": "<GATEKEEPER_URL>",
        "GATEKEEPER_AGENT_NAME": "<GATEKEEPER_AGENT_NAME>",
        "GATEKEEPER_RUN_ID": "<GATEKEEPER_RUN_ID>"
      }
    }
  }
}

Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs

gatekeeper in other clients

gatekeeper MCP server