mcp-registry/dev.workers.3labsio.policy-gate/policy-gate · v0.2
As of 2026-10-25 03:46 UTC, the Workers 3labsio Policy Gate Policy Gate MCP server is up with a Glimind reliability score of 100/100 (grade A). Over the last 30 days it answered 100% of Glimind's liveness checks.
Deterministic allow/require_approval/deny verdicts for agent actions, before they happen.
Claude Code
claude mcp add --transport http workers-3labsio-policy-gate-policy-gate- https://policy-gate.3labsio.workers.dev/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"workers-3labsio-policy-gate-policy-gate-": {
"type": "http",
"url": "https://policy-gate.3labsio.workers.dev/mcp"
}
}
}
Third-party server, listed as discovered. Review its source before installing.
4 of 4 tool(s) carry no readOnlyHint/destructiveHint annotations.
Annotate read-only tools with {"readOnlyHint": true}. Agents and gateways can then run them without a confirmation prompt, and route around destructive ones. How to fix →
1 parameter(s) across 1 tool(s) have no description.
Add a "description" to each parameter with its format and an example ("ISO 8601 date, e.g. 2026-10-17"). This is the commonest cause of wrong arguments on the first call. How to fix →
No tool declares an outputSchema.
Declare outputSchema and return structuredContent (MCP 2025-06-18+). Agents can then parse results without guessing, and chain tools reliably. How to fix →
Paste-ready definitions with the problems above fixed. Changes marked verify need a human look. 1 tool(s) still need parameter descriptions written by someone who knows the API. All of them as JSON: /v1/readiness/mcp-registry%2Fdev.workers.3labsio.policy-gate%2Fpolicy-gate/fixes
{
"name": "policy_check",
"description": "Evaluate a proposed agent action against a policy and return allow / require_approval / deny with the matched rule and rationale. Paid per call via x402 ($0.005 USDC on Base); returns signing instructions when unpaid.",
"inputSchema": {
"type": "object",
"required": [
"request"
],
"properties": {
"ledger": {
"type": "object",
"properties": {
"unknown_usd": {
"type": "number",
"description": "Dispatched and never resolved. Any value above zero denies with unresolved_intent, regardless of headroom: the system has lost track of this quantity. It closes by observing the target, never by a clock."
},
"intended_usd": {
"type": "number",
"description": "Dispatched and not yet confirmed. Counts toward the bound, so a burst in flight is not invisible to it."
},
"committed_usd": {
"type": "number",
"description": "Spend already known to have happened in the window"
}
},
"description": "Optional cumulative exposure for the window. A per-action gate cannot see repetition: 49 payments of $40 each pass a $50 rule individually. Omit it and any policy declaring a cumulative bound returns deny with ledger_required — a cap you can skip by omitting state is decorative. Explicit zeros are an answer; an absent object is not."
},
"policy": {
"type": "object",
"description": "Your own policy document, evaluated instead of ours"
},
"request": {
"type": "object",
"required": [
"action"
],
"properties": {
"actor": {
"type": "string"
},
"action": {
"type": "string",
"description": "Dotted action id, e.g. payments.send"
},
"params": {
"type": "object"
}
}
},
"policy_id": {
"type": "string",
"description": "Built-in policy id; see policy_rules. \"default-action-tiers-capped\" adds a cumulative spend bound."
}
}
},
"annotations": {
"readOnlyHint": true
}
}Get an email or webhook when this server's readiness drops by 10+ points, tool-poisoning text appears, or a tool breaks:
curl -X POST https://glimind.com/v1/subscriptions -H 'content-type: application/json' -d '{"tools":["mcp-registry/dev.workers.3labsio.policy-gate/policy-gate"],"email":"[email protected]"}'Agents: watch_tool({"toolId": "mcp-registry/dev.workers.3labsio.policy-gate/policy-gate"}) over MCP.
policy_check ~463 tokensfirst_42_sponsor ~78 tokenspolicy_example ~61 tokenspolicy_rules ~59 tokensStatic checks of the advertised tools/list (schema, descriptions, annotations, tool-poisoning patterns, names, size) plus observed protocol, uptime, latency and contract changes. Read-only: no tool is ever called. Weights: schema 15, docs 20, safety 15, efficiency 15, compatibility 15, protocol 5, reliability 10, stability 5. Token counts are estimates (~3.6 characters per token).
Operator? Fix these, then re-check live. Embed the readiness badge:
[](https://glimind.com/server/mcp-registry%2Fdev.workers.3labsio.policy-gate%2Fpolicy-gate?ref=badge)
<a href="https://glimind.com/server/mcp-registry%2Fdev.workers.3labsio.policy-gate%2Fpolicy-gate?ref=badge"><img src="https://glimind.com/v1/readiness/badge/mcp-registry%2Fdev.workers.3labsio.policy-gate%2Fpolicy-gate.svg" alt="MCP agent-readiness"></a>
.. image:: https://glimind.com/v1/readiness/badge/mcp-registry%2Fdev.workers.3labsio.policy-gate%2Fpolicy-gate.svg :target: https://glimind.com/server/mcp-registry%2Fdev.workers.3labsio.policy-gate%2Fpolicy-gate?ref=badge :alt: MCP agent-readiness
Glimind records every version of this server's tool definitions in a signed, append-only transparency log. Current manifest sha256:4c44bf62a5e4bf17…, first seen 2026-10-17, included at leaf 4707 of 63,678. Version history · verify what your client received.
Compare: most reliable payments servers · most reliable security servers · most reliable knowledge servers
Glimind tells agents whether a server is up right now and how to call it, then fails over to a live alternative when it isn't.
Claude Code
claude mcp add --transport http glimind https://glimind.com/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"glimind": {
"type": "http",
"url": "https://glimind.com/mcp"
}
}
}
As of 2026-10-25 03:46 UTC, the Workers 3labsio Policy Gate Policy Gate MCP server is up with a Glimind reliability score of 100/100 (grade A). Over the last 30 days it answered 100% of Glimind's liveness checks.
Workers 3labsio Policy Gate Policy Gate MCP server advertises 4 tools, including first_42_sponsor, policy_check, policy_example, policy_rules.
Point your MCP client at this streamable-http endpoint: https://policy-gate.3labsio.workers.dev/mcp
Glimind scanned all 4 tool definitions for tool-poisoning patterns — hidden or invisible characters, instructions that override the model, concealment from the user, requests to read credential or MCP config files, conversation exfiltration and cross-tool shadowing — and found none. This checks what the server tells the model, not what its code does; review the source before granting access to sensitive data.
Status page: 90-day uptime, every outage and how long it lasted.
Claim this listing to get the Verified operator marker, a remediation checklist and owner analytics, or embed the live badge from any of the tool pages above. Maintainers: alerts, deploy attestation and monthly reports.
Status is an automated estimate from Glimind's liveness checks (handshake and tool listing only; no tool is ever called) and may lag or differ from your network. Glimind is not affiliated with this server or its operator. Operator? Request a correction or opt out at https://glimind.com/opt-out.