360 Secure SkillHub
360 安全技能中心

Echo Gate

Echo Gate是管控Agent可调用工具的控制层，核心功能含工具注册、API密钥管理、网关工具调用、调用收据核查、网关健康检查及付费工具接入准备等。典型场景包括注册Agent工具、创建/撤销密钥、审计调用记录、运维VPS服务等。支持API接口与CLI命令操作，需对应授权令牌，采用本地优先模式，当前为v0公开发布，付费功能暂未上线。

builtbyecho
builtbyecho
热度 25.24
最近更新 2026-05-22 12:05:31
分类：开发依赖：代码执行 / 第三方 API / MCP 服务应用场景：API 集成 / 自动化脚本 / DevOps / 任务管理

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add echo-gate
Metadata
name
echo-gate
description
Use Echo Gate when registering, exposing, calling, securing, auditing, or operating local-first agent-callable tools through the BuiltByEcho gateway. Covers tool registry entries, API keys, receipts, authenticated calls, local secret storage, approvals, spend limits, and future x402 paid-tool readiness.

Echo Gate

Echo Gate is the control layer for agent tools: registry, permissions, API keys, receipts, limits, and paid-call readiness before an agent touches anything real.

Use this skill when a task involves:

  • registering an agent-callable tool
  • creating, listing, or revoking Echo Gate API keys
  • calling a tool through the gateway
  • checking receipts for tool calls
  • operating the VPS service
  • checking local gateway health
  • preparing a tool for x402/Bankr paid access

Current Status

  • GitHub: https://github.com/BuiltByEcho/echo-gate
  • npm package: @builtbyecho/echo-gate
  • Local project: projects/echo-gate
  • Package: @builtbyecho/echo-gate
  • Default gateway: http://localhost:8787
  • Default state path: ~/.config/echo-gate
  • Status: public v0 local-first release.
  • Convex mode: experimental opt-in only, not the default product path.

API Surface

  • GET /health
  • GET /tools
  • POST /tools
  • POST /keys
  • GET /keys
  • DELETE /keys/:id
  • PUT /keys/:id/policies/:slug
  • POST /tools/:slug/call
  • GET /receipts
  • GET /approvals
  • POST /approvals/:id/decision
  • GET /approvals/:id/status

Admin routes require Authorization: Bearer <ECHO_GATE_ADMIN_TOKEN>.

Tool calls require Authorization: Bearer egk_....

CLI

From the project root:

npm install -g @builtbyecho/echo-gate
echo-gate

From source:

npm run build
npm test
node bin/echo-gate.js health
node bin/echo-gate.js tools
node bin/echo-gate.js create-key --name demo --tool echo
node bin/echo-gate.js call echo --json '{"hello":"world"}'
node bin/echo-gate.js receipts
node bin/echo-gate.js keys
node bin/echo-gate.js revoke-key <id>

Use env vars:

  • ECHO_GATE_URL
  • ECHO_GATE_KEY
  • ECHO_GATE_ADMIN_TOKEN

Operations

Use local-first mode unless Dustin explicitly asks for remote deployment:

npm run build
npm test

Check local health:

curl -sS http://localhost:8787/health

Do not paste or store the admin token in chat, docs, memory, commits, or public issue comments.

Release Rules

  • Do not publish API keys.
  • Keep echo as the smoke tool until real adapters are ready.
  • Before release or announcement, verify build, tests, local health, unauthenticated 401, valid-key call, receipt write, and key revocation.
  • x402/Bankr paid tool calls are planned, not live yet.