toolfence MCP Server
jiangkoumo/toolfence
[](https://agentrank-ai.com/tool/jiangkoumo--toolfence/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) Are you the maintainer of jiangkoumo/toolfence? Claim this listing →
Local, fail-closed policy enforcement and human approval for MCP tool calls.
Add AgentRank to Claude Code Discover and compare tools like jiangkoumo/toolfence — your AI finds the right one automatically
Get API Access → claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
jiangkoumo/toolfence is a TypeScript tool licensed under MIT. Local, fail-closed policy enforcement and human approval for MCP tool calls. Topics: ai-agents, mcp, policy, proxy, security.
Ranked #16697 out of 24846 indexed tools.
Ecosystem
TypeScript MIT
ai-agentsmcppolicyproxysecurity
Score Breakdown
Stars 15% 100
100 stars → early stage
Freshness 25% 2mo ago
Last commit 2mo ago → moderate activity
Issue Health 25% 50%
No issues filed → no history to score
Contributors 10% 1
1 contributor → solo project
Dependents 25% 0
No dependents → no downstream usage
npm Downloads N/A
PyPI Downloads N/A
Forks 0
Description Good
License MIT
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Description low impact
Freshness high impact
Contributors medium impact
Matched Queries
From the README
# ToolFence **A vendor-neutral policy firewall for MCP tool calls.** ToolFence enforces one testable least-privilege policy between AI agents and stdio MCP servers. With a conservative default (`ask` or `deny`), the same rules can be used from Codex, Cursor, or Claude Desktop: safe calls pass, dangerous or unrecognized calls stop before upstream execution, and uncertain calls require human approval—without changing the MCP host or server. - **Portable policy:** keep resource and command rules independent of a single Agent platform. - **Deterministic enforcement:** normalize tool calls, give `deny` precedence, and surface unknown or ambiguous actions for conservative policy handling. - **Auditable evidence:** record privacy-conscious decisions and result hashes without storing raw arguments or results. ## Same MCP call. Different outcome. The animation sends the same `.env` read to the official Filesystem MCP Server twice: - without ToolFence, the server returns the explicitly synRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.