protect-mcp-setup

Give every tool call a policy gate and signed receipt.

agent governance

What it does

Configures policy-gated Claude Code tool calls and creates signed receipts that can be verified offline.

When to use it

Use when setting up projects that need policy-gated execution, cryptographic audit trails, or compliance evidence of agent actions.

Give it a project to protect; it installs policy hooks, creates signing-key setup, and records signed tool-call receipts in the project.

What you provide

This skill

Claude Code project hooks and skill

Write

Adds Claude Code project hooks

wshobson/agents/protect-mcp

Execute

Installs the protect-mcp plugin

Claude Code hook events

Read

Inspects Claude Code tool calls

Node.js is needed to run the npx-based signing-key setup.