
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
token-gate-mcp
Advanced tools
Token and context budget for AI agents. Tracks spend, estimates the cost of reads, and tells an agent the cheaper path before it burns its budget.
Token and context budget for AI agents. Tracks session spend, estimates the cost of a read before it happens, and tells an agent the cheaper path before it burns its budget.
Built as an MCP server, so it works in any platform that speaks Model Context Protocol.
Agents discover their budget is gone after it is gone. A single file dump can cost more than an entire task was worth. Context makes spend visible and measurable, and warns before the expensive read.
context.log record a token spend event by kind: read, tool, model, write, othercontext.report the session totals, spend by kind, budget, and remainingcontext.estimate estimate the token cost of reading a file and compare it with a cheaper alternative such as a graph querycontext.limit set or read the session budgetcontext.check a boolean the agent can gate on: within budget or over budgetEstimates assume roughly four characters per token.
npm install -g token-gate-mcp
{
"mcpServers": {
"token-gate": {
"command": "token-gate-mcp",
"args": []
}
}
}
MIT. Part of the Tawakkul Labs MCP family.
Links: npm | GitHub | Tawakkul Labs
FAQs
Token and context budget for AI agents. Tracks spend, estimates the cost of reads, and tells an agent the cheaper path before it burns its budget.
The npm package token-gate-mcp receives a total of 583 weekly downloads. As such, token-gate-mcp popularity was classified as not popular.
We found that token-gate-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.