How do I install MetaMynd MCP Gateway – AI Agent Security & Governance?

Install MetaMynd MCP Gateway – AI Agent Security & Governance in your harness: Source — https://github.com/Metamynd/metamynd-mcp-gateway/releases. Full step-by-step guidance is on the HOL plugin page.

How is the Trust Score for MetaMynd MCP Gateway – AI Agent Security & Governance computed?

MetaMynd MCP Gateway – AI Agent Security & Governance has a HOL Trust Score of 89 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/metamynd%2Fmetamynd-mcp-gateway/trust

Who publishes MetaMynd MCP Gateway – AI Agent Security & Governance?

MetaMynd MCP Gateway – AI Agent Security & Governance is published by Metamynd and listed on HOL.

MetaMynd MCP Gateway – AI Agent Security & Governance

metamynd/metamynd-mcp-gateway · v0.2.5 · source 76b8af4 · Tools & Integrations

by MetamyndOwner verifiedScan grade: Acceptable

MCP server: secure tool calls with real-time AI agent policy enforcement, access controls and auditable authorization

Install Source

Follow0

Trust Score89 Security scan78 ComponentsScan pending

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is MetaMynd MCP Gateway – AI Agent Security & Governance a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

Before you install

Sign-in: Not declared
Declared access: Not declared
License: Not declared

Check before relying on it

No license declared in the manifest.

What is MetaMynd MCP Gateway – AI Agent Security & Governance?

MetaMynd MCP Gateway – AI Agent Security & Governance is a published tools & integrations plugin for AI coding agents in the MCP ecosystem, developed by Metamynd and distributed through the HOL AI plugin registry. MCP server: secure tool calls with real-time AI agent policy enforcement, access controls and auditable authorization.

Canonical slug: metamynd/metamynd-mcp-gateway
Version: v0.2.5 · source 76b8af4 · updated Nov 5, 2026
Open data: entity.json (JSON-LD)

Registry snapshot

Repository: https://github.com/Metamynd/metamynd-mcp-gateway
Canonical profile: https://hol.org/registry/plugins/metamynd%2Fmetamynd-mcp-gateway
Owner verification: Verified on HOL as @metamyndai
Scanner: HOL plugin scanner
Security result: Needs review
Digest verified: Yes

Trust and security

Trust & reputation

On-Chain Verified

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability

100/100

Maintenance

100/100

MCP server setup

100/100

Plugin Security

78/100

Provenance

80/100

Publisher Quality

100/100

Provenance

Plugin root: .
Source repo: https://github.com/Metamynd/metamynd-mcp-gateway
Source commit: 76b8af44ee99…
Publisher verified: Yes
Owner verified: @metamyndai
Agent Plugins 1.0: Not detected

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge detected

The source repository README links to this HOL listing. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed

Needs review

Security result

Security score

High findings

Provider: codex-plugin-scanner
Grade: C · Acceptable
Version: 3.24.2

cisco-skill-scanner: skippedcisco-mcp-scanner: skipped

Manifest Validation

21/31

9 checks

Security

16/16

9 checks

Operational Security

3/6

5 checks

Best Practices

6/9

5 checks

Marketplace

N/A

3 checks · not applicable

Skill Security

N/A

3 checks · not applicable

Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked 2026-11-05. This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_AUTHOR

The manifest is missing the documented recommended field "author".

Add "author" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_LICENSE

The manifest is missing the documented recommended field "license".

Add "license" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_KEYWORDS

The manifest is missing the documented recommended field "keywords".

Add "keywords" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Source

Install from a native release archive or the assessed source revision.

Install guide

1
Download the release archive
Use a published GitHub release archive. The catalog version is the package version at the assessed commit.
shell
2
Follow the publisher install guide
https://github.com/Metamynd/metamynd-mcp-gateway/blob/76b8af44ee99615495ae1c950bd430405726b7ef/docs/INSTALL.md

Did setup work in Source?

No setup reports for Source yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

1 / 1

MetaMynd MCP Gateway – AI Agent Security & Governance demo video

Loading reviews

Plugin manifest

{
  "name": "metamynd-mcp-gateway",
  "version": "0.2.5",
  "description": "MCP server: secure tool calls with real-time AI agent policy enforcement, access controls and auditable authorization",
  "repository": "https://github.com/Metamynd/metamynd-mcp-gateway",
  "homepage": "https://github.com/Metamynd/metamynd-mcp-gateway",
  "interface": {
    "displayName": "MetaMynd MCP Gateway – AI Agent Security & Governance",
    "developerName": "Metamynd",
    "category": "Tools & Integrations"
  },
  "holManifestOrigin": "synthesized",
  "registryIndexVersion": 9
}

File inventory

.codex-plugin/plugin.json

plugin-manifest

515 bytes

fc70467746a5e4f1…

LICENSE

file

1,420 bytes

0cab1b96e10a2549…

package-lock.json

file

31,558 bytes

5f5449507d21c655…

package.json

file

1,939 bytes

43cb5b3d2e7e57f7…

README.md

file

4,404 bytes

6cfe6b342079fef2…

README.md

file

4,404 bytes

6cfe6b342079fef2…

SECURITY.md

file

588 bytes

b1a587708f1b381e…

tsconfig.json

file

278 bytes

a0d8a0a824e07b07…