approval-gate

🎯 Why?

Trending repos show agents getting more autonomous, but guardrails are mostly blockers or prompt-level policies. Destructive Command Guard blocks commands, while agent frameworks and channel SDKs still lack a tiny durable human-in-the-loop approval queue that any MCP client or CLI agent can use. approval-gate fills that gap with a single-file SQLite-backed approval gateway, risk scoring, and audit trail.

Target audience: Developers running coding agents, DevOps agents, or MCP-powered assistants who want safe autonomy with explicit human sign-off for risky commands.

✨ Features

• ✨ MCP stdio server with request_approval, list_approvals, resolve_approval, and audit_tail tools
• ✨ CLI for creating, listing, approving, denying, and auditing approval requests
• ✨ Rule-based risk scoring for shell commands with optional auto-approval for low-risk actions

🚀 Quick Start

# Install
pip install approval-gate

# Run
approval-gate --help

📦 Installation

From Source

git clone https://github.com/YOUR_USERNAME/approval-gate.git
cd approval-gate

# Create virtual environment
python -m venv .venv
source .venv/bin/activate  # Windows: .venv\Scripts\activate

# Install in development mode
pip install -e ".[dev]"

# Run tests
pytest -v

🎬 Demo

The GIF above was recorded using Charm VHS:

vhs < demo.tape

📖 Usage

# Show help
approval-gate --help

# Common usage examples
approval-gate --example

🏗️ Architecture

graph LR
    A[Input] --> B[Core Engine]
    B --> C[Output]
    B --> D[Plugins]
    D --> E[Extensions]

🤝 Contributing

Contributions are welcome! Please:

1. Fork the repo
2. Create a feature branch (git checkout -b feature/amazing-feature)
3. Commit your changes (git commit -m 'Add amazing feature')
4. Push to the branch (git push origin feature/amazing-feature)
5. Open a Pull Request

📄 License

MIT © 2026 — See LICENSE for details.