Name: ZenGate Sovereign Gateway & Execution Enclave
Author: adriancasas

ZenGate Sovereign Gateway & Execution Enclave MCP

Swiss-governed, zero-leakage Model Context Protocol gateway. 10 modular semantic cubes, 19 canonical tools, sub-15ms execution, and 3rd-degree Saga workflows.

Tool-list grade A Endpoint verified Remote · Streamable HTTP Buyer key only 19 tools v0.1.0 · 20 Oct 2026

No reviews yet by adriancasas The publisher’s own endpoint, called through our gateway

93/100

tool-list score

tools declared

remote

via our gateway

—

p95 latency

What it does

## Sovereign B2A Execution Gateway for Autonomous Agents
**ZenGate** is an enterprise-grade, Swiss-hosted Model Context Protocol (MCP) server engineered for high-assurance autonomous agent workflows. Operating under strict Swiss Federal Data Protection (revDSG / nLPD) and Sovereign Neutrality, ZenGate provides zero-token bloat, deterministic tool discovery, and transactional settlement.
### Core Capabilities- **10 Verticals**: Covering Industrial Procurement (CBAM/DIN/ISO), Biotech Clinical Sourcing, VIP NetZero Mobility, Telecom/eSIM Provisioning, and Universal Vectorpedia Federation.- **19 Canonical Tools & 3 Saga Workflows**: Out-of-the-box support for multi-step orchestrated sagas (`zengate_wf_industrial_procurement`, `zengate_wf_biotech_clinical_sourcing`, `zengate_wf_geo360_vip_netzero`).- **Ultra-Low Latency**: In-memory Valkey L1 locking and sub-15ms edge dispatching on bare-metal infrastructure.- **Zero Data Leakage**: In-flight redaction of corporate PII and credentials before upstream LLM exposure.- **B2A Native Settlement**: Direct compatibility with decentralized agent invoicing, wholesale spread arbitrage, and Stripe Connect.
### Architecture & Compliance- **Transport**: Standard Server-Sent Events (SSE) + JSON-RPC 2.0.- **Compute Location**: Geneva, Switzerland (`CHE-Geneva-Sovereign`).- **Federation Ready**: Seed Universe Node 00 for the global Vectorpedia Agentic Overlay Network.

Quickstart

# 1 — sign in once: npx mcprush@latest login
#     it asks for a key from mcprush.com/dashboard#access
# 2 — install
npx mcprush@latest add adriancasas/zengate-sovereign-gateway-execution-enclave-mcp

# 3 — ask your agent for something these tools do
#   zengate_privacy_shield, zenphone_allocate_line, zenphone_receive_otp and 16 more

Windows PowerShell says 'running scripts is disabled on this system'? Run Set-ExecutionPolicy -Scope CurrentUser RemoteSigned once, or type npx.cmd instead of npx (codex.cmd, gemini.cmd, grok.cmd likewise). PowerShell 7 needs neither.

ZenGate Sovereign Gateway & Execution Enclave costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publisher

adriancasas2 servers

2 categories

All 2 servers

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Filtro criptográfico de privacidad y sanitización en el borde. Elimina PII (nombres, DNIs, emails, teléfonos), neutraliza intentos de Prompt Injection y genera resúmenes taxonómicos sin fugas de datos.

Parameter	Type	Required	Notes
raw_text	string	yes	Texto sin procesar que contiene información sensible o no verificada.

Asigna una línea telefónica móvil E.164 soberana (CH, ES, US, UK, DE) de forma efímera en memoria. Diseñada para verificaciones agénticas, reservas de viaje y transacciones B2A sin costes de API externas.

Parameter	Type	Required	Notes
country_code	string	no	Código de país ISO-2 (e.g. 'CH', 'ES', 'US', 'UK', 'DE').
purpose	string	no	Finalidad de la línea (e.g. '2fa_verification', 'travel_booking').
ttl_minutes	integer	no	Ventana de validez en minutos antes de destruir la sesión en RAM.

Captura y extrae códigos 2FA/OTP recibidos por SMS en la línea asignada. Inspeccionado por Laya Inbound Guard y destruido de la memoria RAM inmediatamente tras la extracción (Zero Logs, Zero PII).

Parameter	Type	Required	Notes
allocated_number	string	yes	Número E.164 soberano asignado previamente (e.g. '+41 22 518 4921').
service_name	string	no	Nombre del servicio emisor (e.g. 'Uber', 'Iberia', 'Stripe', 'Booking').
timeout_seconds	integer	no	Tiempo máximo de espera en segundos.

Emite SMS transaccionales y de notificación agéntica. Protegido por Laya Double Router: Laya Inbound bloquea prompt injection y Laya Outbound DLP bloquea fugas de credenciales y reintentos duplicados.

Parameter	Type	Required	Notes
from_number	string	no	Número de origen asignado o remitente.
to_number	string	yes	Número de teléfono destino en formato E.164 (e.g. '+34600112233').
message_body	string	yes	Cuerpo del mensaje de texto a enviar.

Sensor web de baja entropía. Extrae inteligencia en tiempo real desde la web abierta convirtiendo páginas dinámicas en Markdown puro (<0.5s) sin cookies ni ejecución de JavaScript pesado, sintetizando señales estratégicas y entidades clave.

Parameter	Type	Required	Notes
url	string	yes	URL pública a inspeccionar mediante el sensor de radar.
mission	string	no	Misión o foco cognitivo de la búsqueda (e.g. 'detectar alertas de transporte o tecnología').

Motor de arbitraje comercial y de movilidad B2A. Localiza rutas óptimas, congela inventario en memoria transaccional atómica (Hold SET NX EX) y calcula el spread mayorista garantizado antes de emitir una tarjeta de pago soberano.

Parameter	Type	Required	Notes
origin	string	yes	Código IATA de origen (e.g. 'MAD', 'ZRH').
destination	string	yes	Código IATA de destino (e.g. 'GVA', 'MXP').
departure_date	string	no	Fecha de ida (YYYY-MM-DD).
return_date	string	no	Fecha de vuelta (YYYY-MM-DD).
passengers	integer	no	Número de pasajeros.

Oráculo de aduanas y certificación CBAM (Carbon Border Adjustment Mechanism). Calcula aranceles de carbono transfronterizos, asigna partidas arancelarias HS oficiales y emite atestados de liquidación para importación industrial B2A (acero, aluminio, cemento, fertilizantes).

Parameter	Type	Required	Notes
commodity	string	yes	Materia prima sujeta a CBAM (e.g. 'aluminum', 'steel', 'cement', 'fertilizer').
tonnage	number	yes	Tonelaje métrico de la partida (e.g. 50.0).
country_of_origin	string	no	Código ISO de 2 letras del país de origen (e.g. 'TR', 'IN', 'CN', 'US', 'NO').
delivery_incoterm	string	no	Incoterm de entrega (e.g. 'DAP', 'CIF', 'FOB', 'DDP').
destination_port	string	no	Puerto o aduana de destino europeo (e.g. 'Antwerp', 'Rotterdam', 'Valencia').

Puerta de enlace soberana y puente cognitivo hacia el catálogo de alto valor (High-ROI) de GEO360 MCP. Ejecuta retroenlaces semánticos (MCP Backlinking) para aviación privada VIP, chárter de yates, licitaciones industriales B2A y custodia fiduciaria suiza en sub-milisegundo vía IPC local.

Parameter	Type	Required	Notes
mandate_vertical	string	yes	Vertical de alto valor a resolver en GEO360.
intent_description	string	yes	Descripción formal del mandato ejecutivo (e.g. 'Charter jet privado Ginebra a Ibiza para 4 pasajeros').
parameters	object	no	Parámetros técnicos de la solicitud (e.g. origen, destino, fechas, tonelaje).
target_currency	string	no	Moneda de liquidación fiduciaria (e.g. 'EUR', 'CHF', 'USD').

Probes real-time inventory availability, multi-warehouse stock allocations, and volume-discount wholesale pricing across SAP S/4HANA (OData v4) and Oracle NetSuite backends. Zero exposure of internal corporate database credentials or network topology.

Parameter	Type	Required	Notes
sku_or_material_id	string	yes	Unique material SKU, part number or SAP Material Master ID (e.g. 'CH-IND-VALVE-900').
quantity_required	integer	no	Units required for the procurement mandate.
target_warehouse_code	string	no	Preferred regional plant or distribution hub ('CH-GVA-01', 'CH-BSL-02', 'DE-FRA-01').
currency	string	no	Settlement currency ISO code ('EUR', 'CHF', 'USD').

Deterministically issues and digitally seals binding Enterprise Purchase Orders (PO). Locks stock atomically in Valkey buffer, validates maximum price caps, and generates ISO 20022 EDI ready settlement payloads compliant with Swiss reverse-charge VAT rules.

Parameter	Type	Required	Notes
sku_or_material_id	string	yes	Confirmed material SKU.
quantity	integer	yes	Exact batch quantity to procure.
max_unit_price	number	no	Ceiling unit price threshold for automated execution.
buyer_corporate_entity	string	yes	Legal company name or sovereign buyer agent ID.
target_erp_protocol	string	no	Target enterprise ERP settlement dialect.
currency	string	no	—

Executes and seals legally binding bilateral Non-Disclosure Agreements (NDAs) under Swiss substantive law (Swiss Code of Obligations Art. 14) and ZertES electronic signature standards. Includes trade secret protection under Art. 162 of the Swiss Criminal Code and exclusive Geneva court jurisdiction.

Parameter	Type	Required	Notes
disclosing_party	string	yes	Legal entity name or sovereign agent identifier of the Disclosing Party.
receiving_party	string	yes	Legal entity name or sovereign agent identifier of the Receiving Party.
confidential_scope	string	no	Specific scope of protected information (e.g. 'Proprietary AI weights, B2A settlement algorithms, and client telemetry').
duration_years	integer	no	Confidentiality protection period in years.
liquidated_damages_chf	number	no	Stipulated contractual penalty for willful breach in CHF.

Seals and activates Autonomous Agent-to-Agent (A2A) Micro-Contracts with fiduciary escrow deposits in memory. Features automated penalty schedules for SLA delays and binding dispute arbitration under Swiss Rules.

Parameter	Type	Required	Notes
contract_title	string	yes	Mandate title or service description (e.g. 'Autonomous Procurement Execution SLA').
principal_id	string	yes	Sovereign ID of the hiring Principal.
contractor_agent_id	string	yes	Sovereign ID of the executing Contractor Agent.
escrow_amount_chf	number	no	Total retainer/escrow amount deposited in Swiss Francs (CHF).
sla_deadline_seconds	integer	no	Execution window in seconds before automated SLA penalty trigger.
penalty_rate_pct_per_minute	number	no	Automated penalty rate deducted from contractor escrow per minute of delay.

Irreversible mathematical tokenization and de-identification of sensitive clinical notes, genomic panels, and patient biomarker telemetry. Enforces k-anonymity (k >= 10), l-diversity (l >= 3), and strict compliance with Swiss Medical Secrecy (Art. 321 SCC) and GDPR Art. 9.

Parameter	Type	Required	Notes
clinical_payload	string	yes	Raw unstructured clinical text, pathology report, or diagnostic panel summary.
disease_category	string	no	Therapeutic medical category.
canton_jurisdiction	string	no	Swiss canton jurisdiction for legal medical custody ('GE', 'BS', 'ZH', 'VD').

Deterministically matches clinical inclusion and exclusion protocol criteria against de-identified biomarker cohort tokens. Computes eligibility confidence scores in sub-15ms without disclosing underlying patient records, hospital identities, or raw genomic sequences.

Parameter	Type	Required	Notes
trial_nct_id	string	yes	Official ClinicalTrials.gov NCT identifier (e.g. 'NCT05918231').
cohort_token_id	string	yes	Tokenized cohort identifier generated by zengate_biomarker_tokenization.
target_biomarkers	array	yes	Required biomarker eligibility criteria (e.g. ['HER2_POSITIVE', 'PD_L1_HIGH']).
minimum_ecog_status	integer	no	Maximum allowed ECOG performance status (0 to 4).

Real-time carbon intensity and renewable generation oracle for European electrical grids (Swissgrid, Statnett, RTE, REE, TenneT). Computes hourly gCO2/kWh emissions, Scope 2 datacenter liabilities (PUE 1.15 adjusted), and live spot prices for Guarantees of Origin (GOs) under the 24/7 CFE standard.

Parameter	Type	Required	Notes
grid_zone	string	yes	European ISO grid zone ('CH', 'NO', 'FR', 'ES', 'DE', 'UK').
compute_kwh_load	number	no	Total compute energy consumption in kilowatt-hours (kWh) to audit.
pue_efficiency	number	no	Datacenter Power Usage Effectiveness ratio (PUE). Default 1.15 (Infomaniak standard).

Deterministically settles and cancels European Guarantees of Origin (GO) under the EECS standard. Binds AI compute consumption directly to certified Swiss hydroelectric and alpine renewable assets, emitting an immutable cryptographic Scope 2 cancellation certificate.

Parameter	Type	Required	Notes
mwh_to_clear	number	yes	Total volume in Megawatt-hours (MWh) to retire (1 MWh = 1,000 kWh).
generation_source	string	no	Target certified renewable energy asset class.
corporate_beneficiary	string	yes	Legal entity name of the corporate beneficiary claiming Scope 2 zero-carbon compliance.

Macro-workflow orquestado Saga de 3er grado: Procurement industrial transfronterizo con sondeo ERP (SAP/NetSuite), cálculo arancelario CBAM UE, custodia legal suiza (CO Art. 14) y retiro de garantías de origen de energía verde 24/7 CFE (AIB EECS).

Parameter	Type	Required	Notes
commodity	string	yes	aluminum, steel, cement, fertilizers
quantity_tons	number	yes	Tonnage to procure
country_of_origin	string	yes	ISO country code (TR, CN, IN, etc.)
buyer_company	string	yes	Corporate entity receiving cargo
buyer_agent_id	string	no	Principal agent identifier
supplier_agent_id	string	no	Supplier agent identifier

Macro-workflow orquestado Saga de 3er grado: Reclutamiento de cohortes clínicas con sanitización PII, tokenización k-anónima (k>=10) bajo secreto médico suizo (CP Art. 321), verificación de criterios ClinicalTrials.gov (NCT), NDA bilateral ZertES y notificación SMS 2FA a investigador.

Parameter	Type	Required	Notes
clinical_payload	string	yes	Unstructured doctor clinical notes
disease_category	string	no	e.g. oncology
trial_nct_id	string	yes	ClinicalTrials.gov NCT identifier
target_biomarkers	array	yes	—
disclosing_institution	string	no	Hospital or research center
sponsor_entity	string	no	Pharma company sponsor

Macro-workflow orquestado Saga de 3er grado: Movilidad ejecutiva VIP con arbitraje de mercado, emisión de mandato hacia nodo GEO360 (:5050), fianza de microcontrato CO Art. 14 y neutralización climática neta con retiro AIB EECS.

Parameter	Type	Required	Notes
origin	string	yes	Departure airport code (e.g. GVA)
destination	string	yes	Arrival airport code (e.g. IBZ)
departure_date	string	yes	YYYY-MM-DD
passengers	integer	no	Number of VIP passengers
mandate_vertical	string	no	vip_aviation, yacht_charter

Free

$0 forever

Every tool, no call limit, and mcprush charges nothing
A buyer key from your dashboard — the gateway refuses a call without one
Answers through our gateway, so every call is in your log
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install ZenGate Sovereign Gateway & Execution Enclave or to call it, and its free tier carries no monthly call limit.

ATool-list grade · score 93 / 100

Release 0.1.0 · scanned 20 Oct 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 0 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digest2eb06aa9fbde72cf76159a3df1ff6baa50da9fb1b0cabb2daee6b5f8e1324efa

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
zengate_privacy_shield	no tags
zenphone_allocate_line	no tags
zenphone_receive_otp	external-sink	external-sink: keyword "sms"
zenphone_send_sms	external-sink	external-sink: keyword "sms"
zengate_radar_recon	no tags
zengate_market_arbitrage	no tags
zengate_cbam_customs_oracle	no tags
zengate_commercial_gateway	no tags
zengate_erp_inventory_probe	no tags
zengate_erp_po_settlement	no tags
zengate_legal_nda_handshake	no tags
zengate_microcontract_seal	no tags
zengate_biomarker_tokenization	no tags
zengate_clinical_trial_matcher	no tags
zengate_green_energy_oracle	no tags
zengate_carbon_guarantee_settle	no tags
zengate_wf_industrial_procurement	no tags
zengate_wf_biotech_clinical_sourcing	external-sink	external-sink: keyword "sms"
zengate_wf_geo360_vip_netzero	no tags

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.

Supply chain and provenance

Integrityfirst-seen

Surface digest2eb06aa9fbde72cf

Scanned2026-10-20

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

ZenGate Sovereign Gateway & Execution Enclave MCP

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also