BSL 1.1 Licensed — Code-auditable, commercially protected

Security Scanner
for MCP & AI Skills

大模型的安检仪。验证每一个 MCP Server 和 AI Skill 的安全性。
The security gate for AI agents — verify every MCP tool and skill before execution.

5-layer mathematical proof. Zero dependencies. 100% offline. No heuristics, no AI-based detection.

Read the Docs → How it works
$ pip install jadegate click to copy
$ npx @jadegate/mcp-server click to copy
JadeGate Claude Code Cursor LangChain CrewAI Any MCP Client
JadeGate Demo
Security

Five layers. Zero trust.

Every skill passes through 5 deterministic verification layers before it receives the 💠 seal. No exceptions.

JadeGate 5-Layer Validation Pipeline
01

Structural Integrity

JSON Schema validation. Malformed files rejected before any analysis begins.

02

Code Injection Scan

Pattern-matches against 47 known injection vectors. eval(), exec(), __import__(), encoded payloads. One match → rejected.

03

Bayesian Confidence

Multi-signal Bayesian inference produces a confidence score. ≥0.95 → 💠 Verified. <0.70 → ❌ Rejected.

04

Network Leak Analysis

Whitelisted domains and protocols only. Any outbound connection to an unlisted endpoint → flagged.

05

DAG Integrity

Execution flows verified as Directed Acyclic Graphs. Cycle detection, reachability proof, termination guarantee.

Cryptographic Signing

Owner root key signs verified skills. Sub-CA certificates for enterprises. Full chain-of-trust verification.

Trust Model

Hierarchical CA Architecture

The same trust model that secures the internet. Root authority issues certificates. Enterprises get scoped Sub-CAs. Anyone can verify. Only the root can certify.

JadeGate Trust Hierarchy
🔑 Root CA — JadeGate

├── 💠 Direct certification — official skills, verified by root key

├── 🏢 Sub-CA: Anthropic — scope: claude.* — expires: 365d
│ ├── ✅ Can certify skills within scope
│ └── ❌ Cannot forge root signatures

├── 🏢 Sub-CA: OpenAI — scope: gpt.* — expires: 365d

└── 🚫 Revocation — any Sub-CA can be revoked instantly
Comparison

Why JadeGate

Structural verification vs. random search. Deterministic execution vs. prompt mutation.

Agent Skill Ecosystem Comparison
Dimension Traditional Skills Evolution Platforms JadeGate
Format Python / YAML / Markdown Proprietary black-box Pure JSON — non-Turing-complete
Safety Manual review Trust the platform 5-layer mathematical proof
Evolution Manual updates LLM mutation (expensive) DAG routing + Bayesian weights
Execution Arbitrary code Cloud-dependent Deterministic DAG — zero hallucination
Privacy Varies Data sent to servers Zero-trust. Local-first. No telemetry.
Cost Token-heavy reasoning GPU-intensive mutation Zero-token execution

Skill Explorer

Search skills and visualize their execution DAGs in real time.

春风不度玉门关

Pass the Gate. Trust the Jade.

Start verifying your AI agent skills today.

Get Started → PyPI Package