# Deploy Gate

> Pre-deploy checklist MCP server — catches what CI misses

- **Type:** MCP server
- **Install:** `agentstack add mcp-tjp2021-deploy-gate`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [tjp2021](https://agentstack.voostack.com/s/tjp2021)
- **Installs:** 0
- **Category:** [Developer Tools](https://agentstack.voostack.com/c/developer-tools)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [tjp2021](https://github.com/tjp2021)
- **Source:** https://github.com/tjp2021/deploy-gate

## Install

```sh
agentstack add mcp-tjp2021-deploy-gate
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Deploy Gate

[](https://github.com/ITeachYouAI/deploy-gate/actions/workflows/ci.yml)

**Pre-deploy checklist MCP server -- catches what CI misses.**

Deploy Gate is a Model Context Protocol (MCP) server that runs automated pre-deploy checks against your project before you ship. Every check traces back to a real bug that made it to production.

CI catches syntax errors and test failures. Deploy Gate catches the stuff CI doesn't: leaked secrets, empty catch blocks that swallow errors, missing env configs, and more.

## How it works

1. Deploy Gate auto-detects your project's stack (mobile, web, CLI, infra)
2. It runs phase-gated checks: **pre-engineering**, **pre-test**, and **pre-deploy**
3. If any check fails, the gate stays closed -- you fix before you ship
4. Every check has a `from` field linking it to the real incident that inspired it

## Install

### As an MCP server (recommended)

Add to your Claude Code MCP config (`~/.claude.json` or project `.mcp.json`):

```json
{
  "mcpServers": {
    "deploy-gate": {
      "command": "npx",
      "args": ["@iteachyouai/deploy-gate"]
    }
  }
}
```

### From source

```bash
git clone https://github.com/ITeachYouAI/deploy-gate.git
cd deploy-gate
npm install
npm run build
```

## Tools

Deploy Gate exposes 4 MCP tools:

### `run_checklist`

Run checks for a specific phase (or all phases) against a project.

| Parameter     | Type                                               | Required | Description                  |
| ------------- | -------------------------------------------------- | -------- | ---------------------------- |
| `phase`       | `"pre-eng" \| "pre-test" \| "pre-deploy" \| "all"` | Yes      | Which phase to run           |
| `projectPath` | `string`                                           | Yes      | Absolute path to the project |

Returns pass/fail results for each check, a summary, and whether the gate is open.

### `check_deploy_ready`

Quick boolean check: is this project ready to deploy?

| Parameter     | Type     | Required | Description                  |
| ------------- | -------- | -------- | ---------------------------- |
| `projectPath` | `string` | Yes      | Absolute path to the project |

Returns `{ ready: true/false, reason, summary }`.

### `detect_stack`

Detect the technology stack of a project.

| Parameter     | Type     | Required | Description                  |
| ------------- | -------- | -------- | ---------------------------- |
| `projectPath` | `string` | Yes      | Absolute path to the project |

Returns the detected stacks (e.g., `["core", "web"]`).

### `list_checks`

List all available checks, optionally filtered.

| Parameter | Type     | Required | Description     |
| --------- | -------- | -------- | --------------- |
| `phase`   | `string` | No       | Filter by phase |
| `stack`   | `string` | No       | Filter by stack |

## Stack Detection

Deploy Gate auto-detects your stack by looking at project files:

| Stack      | Detection                                                |
| ---------- | -------------------------------------------------------- |
| **core**   | Always included                                          |
| **mobile** | `expo` or `react-native` in package.json                 |
| **web**    | `next`, `@remix-run/node`, or `nuxt` in package.json     |
| **cli**    | `go.mod` exists                                          |
| **infra**  | `systemd/`, `docker-compose.yml`, or `Dockerfile` exists |

Checks are filtered to only run checks relevant to your detected stacks.

## Checks

Every check has an ID, phase, and traces back to a real incident:

| ID   | Phase      | Check                                    | From                              |
| ---- | ---------- | ---------------------------------------- | --------------------------------- |
| PD-3 | pre-deploy | Secret scanning (API keys, private keys) | LooksMaxx: API key in eas.json    |
| PT-5 | pre-test   | Empty catch block detection              | CreateSocial: silent auth failure |

More checks are added over time. Each one comes from a real bug.

## CLI

```bash
# Install the pre-deploy hook for Claude Code
deploy-gate install-hooks
```

## Development

```bash
npm install        # Install dependencies
npm run build      # Compile TypeScript
npm test           # Run tests
npm run dev        # Watch mode
npm run format     # Format code
```

## Contributing

See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.

## Security

See [SECURITY.md](SECURITY.md) for our security policy.

## License

MIT -- see [LICENSE](LICENSE).

---

Built by [ITeachYouAI](https://iteachyouai.com)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [tjp2021](https://github.com/tjp2021)
- **Source:** [tjp2021/deploy-gate](https://github.com/tjp2021/deploy-gate)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-tjp2021-deploy-gate
- Seller: https://agentstack.voostack.com/s/tjp2021
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.