Gateco
Permission-aware retrieval for AI systems: policy-enforced access to organizational knowledge.
ai.gateco/gateco
Publication
Published
Publisher
fortisil
Publisher identity: Not verified
Primary source
Official MCP Registry record
https://github.com/fortisil/gateco-sdk-pythonStatic analysis · human review · publication
Security evidence
Scanner signals, coverage and review decisions describe different parts of this report.
- Scan status
- completed
- Coverage
- Sufficient source coverage
- Static risk signals
- 0/100 · none
- Finding count
- 0
- Highest finding severity
- None detected
- Human review
- Approved review
- Review freshness
- Stale review
- Publication
- Published
Scan coverage and reliability
The scan completed with enough source coverage for ToolRepute's current review workflow. This does not verify runtime behavior.
Reliability: Meets current requirements
- Scanner version
- V6
- Scan run
- 342
- Last scan date
- 2026-10-06
- Files scanned
- 84
- Bytes scanned
- 470,391
- Manifest
- Found
- Source commit
- Pinned
- Truncation
- No
Analyzed source
https://github.com/fortisil/gateco-sdk-python
Analyzed commit: d188b83d6abedf8ff25ab676eb8c466d2e562d97
Human review and publication
This historical decision does not establish current approval for the current review workflow. It may concern an older run, changed evidence or an older scanner.
- Review decision
- Approved review
- Review date
- 2026-10-06
- Reviewed scan run
- 342
- Reviewed commit
- d188b83d6abedf8ff25ab676eb8c466d2e562d97
Publication is a decision to display evidence under ToolRepute's current rules, not a security certification, endorsement or guarantee.
Internal reviewer identity, review notes and private metadata are not displayed.
Published findings
No findings detected by this scan
This does not guarantee the integration is free of security issues. The configured checks found no matching signals in the inspected source.
Reputation evidence
Insufficient evidence · low confidence · model v1
Evidence support score: 5/100. This is separate from risk, review and publication.
Assessment as of 2026-10-22. Live repository HEAD is not checked when this page loads.
Security evidence · 0/25LIMITED · low confidence
Reliable mapped v6 scope is not established; evidence age: recent.
Static support is capped at 18/25 before a risk deduction of ceil(riskScore/4); zero findings does not establish safety.
Last observed: 2026-10-06
- scan record 342: Scanner v6; completed; manifest found; sufficient scope true; 84 files / 470391 bytes; 0 findings; not truncated; scanner risk score 0.Commit d188b83d6abedf8ff25ab676eb8c466d2e562d97Source evidence
Static analysis covers a bounded source scope, not runtime, dependencies in full, or hosted behavior.
Source transparency · 5/25STALE · low confidence
Completed matching public GitHub acquisition: not established (+0).
Unique primary mapping: observed (+5).
Completed matching pinned commit: not established (+0).
Completed matching source mapping: not established (+0).
Matching manifest and sufficient untruncated scope: not established (+0).
Last observed: 2026-10-06
- source record 395: Primary mapping is incomplete or changed. Live repository HEAD is not checked by page requests.Source evidence
- scan record 342: Scanner v6; completed; manifest found; sufficient scope true; 84 files / 470391 bytes; not truncated.Commit d188b83d6abedf8ff25ab676eb8c466d2e562d97Source evidence
A source mapping does not prove ownership. Repository availability and live HEAD are not rechecked here.
Review freshness · 0/25STALE · low confidence
Current artifact-bound approval earns 25; matching approval with unchecked live HEAD earns 8; stale, missing or rejected evidence earns 0.
Last observed: 2026-10-06
- review record 63: Decision: approved; reviewed run 342; NEXT-11 freshness: stale.
Page requests make no upstream probe. An old approval is not approval of changed evidence.
Registry consistency · 0/10UNKNOWN · low confidence
Unique primary, normalized active/latest official registry observation earns 10 within 30 days, 5 within 90, otherwise 0.
Last observed: 2026-10-04
- registry record 395: Normalized official record: false; active: true; latest: true; observation age: recent.
Registry consistency is a source-record observation, not identity verification or a security endorsement.
Publisher identity confidence · 0/15UNKNOWN · low confidence
No verified legal, domain or repository-ownership binding is available; free text and the registry verification flag earn no credit.
Last observed: Not available
Publisher name and registry namespace cannot establish legal identity or ownership.
Recorded assessment history (1)
History starts with explicit captures in model v1. Past source and review state cannot be fully reconstructed. Page reads do not save snapshots; changes in the live assessment appear in history only after an explicit capture.
- 2026-10-11 · model v1 · 5/100 · low confidence · scan 342d188b83d6abedf8ff25ab676eb8c466d2e562d97
Recorded signal breakdown
- Security evidence: 0/25 · LIMITED
- Source transparency: 5/25 · STALE
- Review freshness: 0/25 · STALE
- Registry consistency: 0/10 · UNKNOWN
- Publisher identity confidence: 0/15 · UNKNOWN
Reputation reflects ToolRepute-observed evidence only; it is not a guarantee of security.
Signals may be incomplete or stale. Runtime and hosted behavior may differ from scanned source.
Publisher identity has no verified binding. Repository ownership and legal identity are not established.
This score measures support in the available evidence, not the probability that a tool is safe.
Registry data
Version
1.13.0
Packages
1
Remote endpoints
0
Enrichment
complete
Last fetched
2026-10-04
Registry inclusion identifies the source record. It is not a ToolRepute security endorsement.
Normalized sources
Structured from the Official MCP Registry record.
Enriched 2026-10-04
Packages
gateco
More reviewed MCP servers
Continue exploring integrations with published ToolRepute reviews.
Gavelin
Search bills and speaker-attributed hearing transcripts across all 50 US state legislatures.
GetFacade
Designs a real house exterior on its own photo, prices it line by line and documents it.
Helixar Security
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.