Claude Code mod
toolgate
Tool-call firewall for Claude Code built on TypeSafe's Jev: seven risk questions, an action ledger that judges files at write time, floors on the axes that must not soften, and ask instead of allow when the model is unreachable. Every verdict logged with its probabilities.
Install
/plugin marketplace add RiskAverseTech/toolgate
/plugin install toolgate@riskaverseMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: runs processes, reads settings, reads the transcript, draws
- Sees
- every tool call
- Hooks
session.starttool.checktool.callcommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- RiskAverseTech/toolgate
- Folder
plugin- Marketplace
riskaverse- Author
- Jaz
- Type
- Workflow mods
- License
- MIT
- Last updated
- 3 November 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is toolgate?
Tool-call firewall for Claude Code built on TypeSafe's Jev: seven risk questions, an action ledger that judges files at write time, floors on the axes that must not soften, and ask instead of allow when the model is unreachable. Every verdict logged with its probabilities. It is a mod for Claude Code, from RiskAverseTech/toolgate on GitHub.
What can the toolgate mod access?
Its widest reach is "writes or runs" (runs processes, reads settings, reads the transcript, draws). It sees every tool call. Like any mod, it runs with your permissions.
How do I install toolgate?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add RiskAverseTech/toolgate and then /plugin install toolgate@riskaverse.
Is toolgate popular?
RiskAverseTech/toolgate has 28 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 3 November 2026.
More workflow mods
homie-persona-cognition
28TheSmokeDev/taskchad-os
Host-bound cognitive lifecycle events for The Homie.
threads
27promptadvisers/claude-mods-computer-use-threads
A lead chat creates real Claude Code sessions on chosen models, watches them live and steers them.
roof-probe
31kagamiurayama/claude-code-roof-mod
Read-only probe: lists system prompt sections and reminder types into /tmp/roof-probe-log.json
rnb-terminal-routing
83stuinfla/ruvnet-brain
Reviewed per-user native terminal routing
ruflo-market-data
81kruvnet/ruflo
Market data ingestion — feed normalization, OHLCV vectorization, and HNSW-indexed pattern matching. As a mod (ADR-445): keeps credentials and credentialed feed URLs out of market memory, /market-mod, and a status file the console shows
bitfrost
25SavaSoftworks/BitFrost
Use Codex, ZCode, ACP apps (opencode, Oh My Pi, Gemini CLI), Crush, Grok Build and Antigravity as Claude Code subagents
Browse the most popular Claude Code mods, all workflow mods, or the skills and MCP server directories.