ThumbGate
Work on ThumbGate? Verify this listing (free)Pre-action firewall for AI coding agents: checks each tool call in the PreToolUse hook before it runs
Open-source (MIT), local-first pre-action check engine for Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, OpenCode and other MCP agents. It runs in the PreToolUse hook and evaluates each proposed tool call before it executes. By default it hard-blocks detected secret leaks and commands that kill the gate or enable its bypass; rm -rf, git push --force, fetch-and-run and guardrail edits warn and log by default and become hard denies with THUMBGATE_STRICT_ENFORCEMENT=1. Thumbs-up/down feedback on repeated failures becomes local prevention rules (no model retraining). Install with npx thumbgate init; it also ships as an MCP server and a GitHub Marketplace Action. The Operator Framework is the done-for-you service: the team installs and configures the gates for your agents.
Best for: Builders letting Claude Code, Cursor or MCP agents run shell commands who want a local guardrail against secret leaks and destructive commands
Visit ThumbGate ↗Affiliate link: we may earn a commission if you sign up, at no cost to you. It doesn't affect scores. Disclosure.
- Pricing
- Free local install (npx thumbgate init; 2 feedback captures/day, 10 total, up to 3 active auto-promoted prevention rules). Pro $19/mo or $149/yr (unlimited rules, lesson search, dashboard). Operator Framework services: $499 one-time Sprint Diagnostic, $2,500 one-time Turnkey Setup, $500/mo Managed Retainer. Enterprise custom
- Free tier
- Yes: the MIT-licensed local gate is free, with 3 active auto-promoted prevention rules and limited feedback captures
- Open source
- Yes
- Last verified
- 2026-10-17
ThumbGate pricing breakdown, history and cheaper alternatives →
Sources (checked 2026-10-17): thumbgate.ai/operator-framework · github.com/IgorGanapolsky/ThumbGate · npmjs.com/package/thumbgate
Score breakdown
- Fit for the use case17 / 25
- Vibe-coder friendliness10 / 15
- Output quality & reliability9 / 15
- Pricing & free tier12 / 15
- Ecosystem & integrations6 / 10
- Momentum6 / 10
- Code ownership & lock-in8 / 10
Why this score: A real gap for vibe coders: a hook-level check that runs before an agent's tool call, MIT-licensed, local-first and one npx command to install, with very active releases (v1.38.0 on npm, repo pushed Oct 17 2026). It is young and mostly single-maintainer (~29 GitHub stars, ~2.5k npm downloads in the last month), only secret leaks and self-disable commands are hard-blocked by default (rm -rf and force-push just warn unless strict mode is on), and the free tier caps learned rules at 3, so quality, ecosystem and momentum are not yet proven.
Based on desk research of official pricing pages and docs; see methodology.
FAQ
- Is ThumbGate free?
- ThumbGate free tier: Yes: the MIT-licensed local gate is free, with 3 active auto-promoted prevention rules and limited feedback captures. Paid pricing: Free local install (npx thumbgate init; 2 feedback captures/day, 10 total, up to 3 active auto-promoted prevention rules). Pro $19/mo or $149/yr (unlimited rules, lesson search, dashboard). Operator Framework services: $499 one-time Sprint Diagnostic, $2,500 one-time Turnkey Setup, $500/mo Managed Retainer. Enterprise custom.
- What is ThumbGate pricing in 2026?
- ThumbGate pricing (as of our last verification on 2026-10-17): Free local install (npx thumbgate init; 2 feedback captures/day, 10 total, up to 3 active auto-promoted prevention rules). Pro $19/mo or $149/yr (unlimited rules, lesson search, dashboard). Operator Framework services: $499 one-time Sprint Diagnostic, $2,500 one-time Turnkey Setup, $500/mo Managed Retainer. Enterprise custom. Always confirm on the official site — plans change.
- Is ThumbGate open source?
- Yes. ThumbGate is open source.
- What is ThumbGate's PromptToProd score?
- ThumbGate scores 68/100 on PromptToProd (fit, vibe-coder friendliness, quality, pricing, ecosystem, momentum, ownership). See the score breakdown on this page and our methodology.
- What is ThumbGate best for?
- ThumbGate is best for: Builders letting Claude Code, Cursor or MCP agents run shell commands who want a local guardrail against secret leaks and destructive commands.
- When was ThumbGate last verified on PromptToProd?
- Pricing and details for ThumbGate were last verified on 2026-10-17 from official docs and pricing pages.
Alternatives
Compare all ThumbGate alternatives side by side →
Maker of ThumbGate? Show your score
Free embeddable badge. It updates when the score changes. Adding it is optional and never affects the score. About badges
<a href="https://prompttoprod.app/tool/thumbgate/?ref=badge"><img src="https://prompttoprod.app/badge/thumbgate.svg" alt="ThumbGate on PromptToProd: 68/100" height="20"></a>[](https://prompttoprod.app/tool/thumbgate/?ref=badge)For the ThumbGate team
Claim this listing · Get featured, $49
30 days of a clearly labeled “Featured” card at the top of MCP servers, plus a featured badge. One-time, no auto-renewal. Your score of 68 stays exactly as earned: rankings are never pay-to-rank.