Echo Gate

MCP Tools

Use Echo Gate when registering, exposing, calling, securing, auditing, or operating local-first agent-callable tools through the BuiltByEcho gateway. Covers tool registry entries, API keys, receipts, authenticated calls, local secret storage, approvals, spend limits, and future x402 paid-tool readiness.

Install

openclaw skills install echo-gate

Echo Gate

Echo Gate is the control layer for agent tools: registry, permissions, API keys, receipts, limits, and paid-call readiness before an agent touches anything real.

Use this skill when a task involves:

  • registering an agent-callable tool
  • creating, listing, or revoking Echo Gate API keys
  • calling a tool through the gateway
  • checking receipts for tool calls
  • operating the VPS service
  • checking local gateway health
  • preparing a tool for x402/Bankr paid access

Current Status

  • GitHub: https://github.com/BuiltByEcho/echo-gate
  • npm package: @builtbyecho/echo-gate
  • Local project: projects/echo-gate
  • Package: @builtbyecho/echo-gate
  • Default gateway: http://localhost:8787
  • Default state path: ~/.config/echo-gate
  • Status: public v0 local-first release.
  • Convex mode: experimental opt-in only, not the default product path.

API Surface

  • GET /health
  • GET /tools
  • POST /tools
  • POST /keys
  • GET /keys
  • DELETE /keys/:id
  • PUT /keys/:id/policies/:slug
  • POST /tools/:slug/call
  • GET /receipts
  • GET /approvals
  • POST /approvals/:id/decision
  • GET /approvals/:id/status

Admin routes require Authorization: Bearer <ECHO_GATE_ADMIN_TOKEN>.

Tool calls require Authorization: Bearer egk_....

CLI

From the project root:

npm install -g @builtbyecho/echo-gate
echo-gate

From source:

npm run build
npm test
node bin/echo-gate.js health
node bin/echo-gate.js tools
node bin/echo-gate.js create-key --name demo --tool echo
node bin/echo-gate.js call echo --json '{"hello":"world"}'
node bin/echo-gate.js receipts
node bin/echo-gate.js keys
node bin/echo-gate.js revoke-key <id>

Use env vars:

  • ECHO_GATE_URL
  • ECHO_GATE_KEY
  • ECHO_GATE_ADMIN_TOKEN

Operations

Use local-first mode unless Dustin explicitly asks for remote deployment:

npm run build
npm test

Check local health:

curl -sS http://localhost:8787/health

Do not paste or store the admin token in chat, docs, memory, commits, or public issue comments.

Release Rules

  • Do not publish API keys.
  • Keep echo as the smoke tool until real adapters are ready.
  • Before release or announcement, verify build, tests, local health, unauthenticated 401, valid-key call, receipt write, and key revocation.
  • x402/Bankr paid tool calls are planned, not live yet.