GHOSBC Safety Gate is an MCP server with 9 tools an agent can call, among them audit_a2a_agent_card, audit_mcp_dependency, audit_shopify_agentic_storefront. It answers at https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 11 September 2026; the last check, on 20 October 2026, succeeded.
Agent governance with A2A/Shopify/MCP trust audits, action screening, and decision UI.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
audit_a2a_agent_card | Use before depending on an unfamiliar A2A agent. Reads only the public Agent Card and optional public registry metadata, checks declared bindings/protocol versions, skill descriptions, security declarations and registry task-verification ev Inputs: card_url |
audit_mcp_dependency | Use for a public remote MCP server that an autonomous agent depends on. Remembers the tools/list baseline, returns only added/removed/modified tools, screens new or changed tool definitions, and produces one aggregate ALLOW/REVIEW/BLOCK dec Inputs: endpoint_url |
audit_shopify_agentic_storefront | Use to inspect a public Shopify store's AI-shopping surface before an autonomous agent trusts it. Reads only public /.well-known/ucp, /agents.md and /api/ucp/mcp metadata, runs initialize/tools/list, screens exposed tool definitions, and re Inputs: store |
buy_policy_checks | Use only when free usage is exhausted or production volume is needed. Returns Stripe checkout for 10,000 prepaid GHOSBC Safety Gate checks for $19; it does not charge or receive payment credentials. |
sanitize_agent_payload | Use before sending context to an external model, tool or agent when the payload may contain credentials or private material. Redacts common secret patterns and flags policy-extraction language. Not a complete DLP/compliance system. Inputs: payload |
screen_agent_request | Use before an agent follows untrusted instructions or requests capabilities. Returns ALLOW, REVIEW, or BLOCK plus an audit digest. Best for prompt/policy routing; use screen_consequential_action for a concrete purchase, write, deployment, d Inputs: text, capabilities, mode |
screen_consequential_action | Use immediately before a consequential agent action such as purchase, payment, transfer, send, deploy, publish, execute, cart mutation, checkout mutation, or delete. Compares the proposed action with caller-declared allowed actions/targets, Inputs: action, target, amount, currency, constraints |
screen_mcp_tool_definition | Use before exposing a third-party MCP tool to an autonomous agent, or after a tool definition changed. Screens name, description, schema and annotations for injection-like language, credential/private-context surfaces, side-effect risk and Inputs: name, description, inputSchema, annotations |
validate_agent_response | Use immediately before an agent delivers a response outside its trust boundary. Flags likely credential leakage or policy-extraction content and returns a sanitized response when review is needed. Not factuality verification. Inputs: response |
Every block below points at https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp. Pick your client and copy.
claude mcp add --transport http ghosbc-safety-gate https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp
{
"mcpServers": {
"ghosbc-safety-gate": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp"]
}
}
}{
"mcpServers": {
"ghosbc-safety-gate": {
"url": "https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp"
}
}
}{
"servers": {
"ghosbc-safety-gate": {
"type": "http",
"url": "https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp"
}
}
}{
"context_servers": {
"ghosbc-safety-gate": {
"url": "https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp"
}
}
}{
"mcpServers": {
"ghosbc-safety-gate": {
"serverUrl": "https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp"
}
}
}{
"mcpServers": {
"ghosbc-safety-gate": {
"url": "https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp"
}
}
}name: GHOSBC Safety Gate
version: 0.0.1
schema: v1
mcpServers:
- name: GHOSBC Safety Gate
type: streamable-http
url: https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp{
"mcpServers": {
"ghosbc-safety-gate": {
"httpUrl": "https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp"
}
}
}{
"mcpServers": {
"ghosbc-safety-gate": {
"type": "http",
"url": "https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp"
}
}
}{
"mcpServers": {
"ghosbc-safety-gate": {
"url": "https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp"
}
}
}goose://extension?url=https%3A%2F%2Fcibcxqrqiqvzpardbdrw.supabase.co%2Ffunctions%2Fv1%2Fghosbc-safety-gate-mcp&type=streamable_http&id=ghosbc-safety-gate&name=GHOSBC%20Safety%20Gate
It answered our last check on 20 October 2026 in 186 ms. Over 6 checks since 11 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.
9, as returned by the server's own tools/list on 12 September 2026: audit_a2a_agent_card, audit_mcp_dependency, audit_shopify_agentic_storefront, buy_policy_checks, sanitize_agent_payload, screen_agent_request, screen_consequential_action, screen_mcp_tool_definition, and 1 more.
It answered our last check on 20 October 2026 in 186 ms. Over 6 checks since 11 September 2026 it answered 6.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://cibcxqrqiqvzpardbdrw.supabase.co/functions/v1/ghosbc-safety-gate-mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: io.github.misfitmediahouse. Endpoint host: cibcxqrqiqvzpardbdrw.supabase.co. ARD identifier: urn:air:io.github.misfitmediahouse:mcp:ghosbc-safety-gate.
First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.