Skip to content

camjac251/tool-gates

v1.22.0MIT

Intelligent permission gate for Claude Code shell, file, search, Skill, and MCP tool surfaces. AST-parses Bash commands, guards file reads/writes, and blocks configured tool invocations. Defers benign asks to CC's resolver so the prompt UI shows the 'Yes, and don't ask again for X' button, while keeping a deny floor for dangerous patterns. Tracks one-time approvals so they can be batch-promoted to permanent rules later.

test-gate

Test how tool-gates evaluates any tool invocation (Bash, Read, Write, Edit, Glob, Grep, Skill, MCP) and show the permission decision (allow / ask / deny / defer). Pipes a synthesized JSON payload to the tool-gates binary and formats the result. Useful for verifying a new gate, debugging why a command was blocked, or distinguishing 'tool-gates explicitly asks' from 'tool-gates lets CC handle it'. NOT for approving a pending permission (use tool-gates:review) or editing rules manually (use update-config). When checking whether a command would be allowed, debugging why something was blocked or denied, verifying a permission rule works, simulating a tool call without running it, or confirming the defer-vs-explicit-ask wire decision. Triggers on 'is this allowed', 'test gate', 'why was this blocked', 'why was this denied', 'check permission', 'simulate tool call', 'would this run', 'does tool-gates catch this'.

Read SKILL.md at the source

Pinned to revision 9741a13f11fe, so it is the text this page describes rather than whatever the author pushed since.

Pre-approved tools experimental

Experimental field. Support varies between clients, so this list is what the author declared, not what your client will enforce.

  • Bash(tool-gates:*)
  • Bash(echo:*)

Files

Every link opens the file at its source, pinned to the revision this page describes.