agentgate ci
The gate: fail on tool-surface drift from agentgate.lock or on static findings at/above a severity threshold.
agentgate ci [options]ci = diff + scan --fail-on, designed for pipelines: concise output and deterministic exit codes.
Options
Section titled “Options”| Flag | Default | Description |
|---|---|---|
-c, --config <file> |
auto-discover | Explicit MCP client config file. |
-s, --server <names...> |
all | Restrict to specific server names. |
-l, --lockfile <file> |
agentgate.lock |
Lockfile path. |
--fail-on <severity> |
high |
Severity gate for static findings: info, low, medium, high, critical. |
-t, --timeout <ms> |
15000 |
Per-server connect timeout. |
Exit codes
Section titled “Exit codes”| Code | Meaning |
|---|---|
| 0 | No drift and no findings at/above the threshold. |
| 1 | Drift detected, or findings at/above the threshold. |
| 2 | Execution error (missing lockfile, unreachable server). |
CI integration
Section titled “CI integration”- run: npx mcp-agentgate ci --fail-on highFull per-platform recipes (GitHub Actions, GitLab CI, CircleCI, Jenkins, Azure Pipelines): CI integration guide.