Chainsaw package firewall MCP: route agent installs through Chainsaw

Chainsaw is a package firewall for AI agents: its MCP server routes the npm, pip and docker installs that Claude Code or Cursor run through Chainsaw. One mode sets up that install path; another manages Chainsaw's own policy. ContextGate connects it next to your other apps and keeps a record of each change to that policy made through an AI app.

  • Ready to connect
  • Free

How to connect Chainsaw to Claude Code, Cursor or ChatGPT

  1. 1Click Connect Chainsaw package firewall free and sign in with your Chainsaw account.
  2. 2Chainsaw splits the job in two: setting up the install path, and managing policy. If your AI app should use Chainsaw but not change what it allows, keep the first on and switch off the policy-management tools.
  3. 3Add ContextGate to your AI app as a connector or MCP server. The steps for each app are on the Works with page.
  4. 4Ask Claude Code to set up the Chainsaw install path for this project's npm packages, then open Activity to see the call.

What Chainsaw does for your coding agent

  • Route npm, pip and docker installs from Claude Code or Cursor through Chainsaw.
  • Set up the install path for a project from the agent itself.
  • Manage Chainsaw's policy, on least-privilege terms, from a chat.

Who can change Chainsaw's policy

  • Switch off the policy-management tools and keep the install-path setup; switched-off tools are hidden and refused if called.
  • A ContextGate policy can warn or block before a change to Chainsaw's policy goes through.
  • Activity records each call, so a change to Chainsaw's policy can be traced to the request behind it.

ContextGate sees the calls made through it. The installs your coding agent runs in its own terminal are Chainsaw's to route, not ContextGate's.

What you get with Chainsaw package firewall and ContextGate

  • Your AI apps can use Chainsaw package firewallClaude, Cursor, ChatGPT and other AI apps reach Chainsaw package firewall through the one ContextGate connection you add to them.
  • You choose which tools they can useSwitch off any Chainsaw package firewall tool you don't want used. It's hidden from your AI apps and refused if called.
  • Every call is checked and recordedYour policies check each call (for example, personal data is hidden and secrets are blocked), and Activity keeps a record of it.

ContextGate sees only the tool calls that go through it, not your AI app's built-in tools or your chats.

Chainsaw package firewall tools

Chainsaw package firewall's own MCP server shows its tools once you sign in. When you connect it, they are listed and synced in your workspace.