Koma Gate MCP

Expose Koma Gate's prompt-injection classification as an MCP tool for AI agents. Provides a single tool, classify_input, that an AI agent can call to check whether untrusted user text is safe and in-scope before acting on it. It runs locally over stdio via the published package.

People who work with ai security, guardrails and middleware and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-12 · ★ 12 · #25 OF 106 MAINTAINED AI & ML · VERIFIED 2026-09-18

MIT · TypeScript servers · how we verify → /methodology

01 · Install Koma Gate MCP

before you install - you'll need

Set KOMA_PROVIDER, GEMINI_API_KEY before connecting.

Claude Code

claude mcp add swnotmetal-project-koma-packages-koma-ga -- npx -y koma-gate-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "swnotmetal-project-koma-packages-koma-ga": {
      "command": "npx",
      "args": [
        "-y",
        "koma-gate-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-07-24 - young repo, little track record yet

license MIT - declared in the repository

npm package koma-gate-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.swnotmetal is GitHub-verified and matches the repo owner

03 · What Koma Gate MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.2.1 · 2026-08-11

v0.2.0 · 2026-08-07

Koma Gate evaluated against deepset/prompt-injections with real providers (DeepSeek & Gemini), fail-closed mode. Zero false positives, full reproducibility.

v0.1.2 · 2026-08-05

Enriched npm keywords for search visibility (prompt-injection, llm-security, audio-validation) · Added .cursorrules for AI coding agents · Added llms.txt for LLM crawlers · OWASP Top 10 LLM references in README and…

04 · Who maintains Koma Gate MCP

Koma Gate MCP is maintained by swnotmetal. We track 2 MCP servers from swnotmetal - 2 actively maintained, 12 combined GitHub stars, oldest repo from Jul 2026.

  1. Koma Core MCP Protected RAG storage - agents discover public metadata, content only by access token. ★ 12

05 · Facts

category
AI & ML - ranked #25 of 106 actively-maintained AI & ML servers as of 2026-09-18.
release cadence
3 releases in the last 90 days (latest 2026-08-11)
registry
io.github.swnotmetal/koma-gate-mcp (active, first published 2026-08-15)
packages
npm:koma-gate-mcp

06 · Koma Gate MCP FAQ

What is Koma Gate MCP?

Expose Koma Gate's prompt-injection classification as an MCP tool for AI agents. Provides a single tool, classify_input, that an AI agent can call to check whether untrusted user text is safe and in-scope before acting on it. It runs locally over stdio via the published package.

Is Koma Gate MCP still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-12 and it shipped 3 releases in the last 90 days. We re-verify nightly.

How do I install Koma Gate MCP?

Run `npx -y koma-gate-mcp`. The README documents 2 environment variables (KOMA_PROVIDER, GEMINI_API_KEY) to set first. Set KOMA_PROVIDER, GEMINI_API_KEY before connecting. You can also paste the ready-made client config above.

Does Koma Gate MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Koma Gate MCP