DeadBolt

Description

DeadBolt 2.0.0 stable is a free Apache-2.0 local execution gate for routed MCP tool calls. Blank configuration exposes two read-only setup and bundle-verification tools with no active protection. A private operator-owned configuration selects a trusted downstream server, explicit tool policy, destination/offline exceptions and an immutable deadline. Fresh roots default to separate supervisor renewal; deliberate activity mode is supported. Default idle TTL is 60 seconds. Late renewal cannot revive a killed or expired identity. Operator policy, spend, approvals, pause and kill remain outside the model-facing tool surface. Readable tool denials identify the actual reason. Conflicting recognized destination declarations and startup against damaged existing stores are refused. Destination declarations are policy inputs, not OS egress enforcement. Same-user writable state, raw downstream startup and non-tool MCP methods remain outside the tool gate. No in-flight cancellation or OS sandbox. The bundle launcher does not provision exact-action grants. Node.js 20+; macOS ARM64/Intel, Linux x64/glibc and Windows x64. Installed protocol/effect checks passed on all four targets. Prior RC3 Cursor model evidence remains prior-candidate evidence, not GUI validation of stable bytes or certification. Exact release, checksums and receipts: https://github.com/seanebones-lang/deadbolt/releases/tag/mcpb-v2.0.0

Community Metrics

Categories

• mcp

Tags

• mcp
• smithery

Capabilities

• local

Information