dotset wrap
Wrap any MCP server with Tollgate’s policy-based access control. This is a convenience wrapper around thetollgate wrap command.
Usage
Options
| Option | Description |
|---|---|
-d, --default <action> | Default action: allow, deny, prompt (default: prompt) |
--timeout <ms> | Approval timeout in milliseconds |
--approval <method> | Approval method: terminal, interactive |
--approval-port <port> | Port for interactive approval UI |
--dry-run | Dry run mode (log actions without executing) |
Examples
Default Actions
| Action | Behavior |
|---|---|
prompt | Ask user for approval (default, recommended) |
allow | Allow all tool calls without prompting |
deny | Block all tool calls |
Approval Methods
Terminal (Default)
Prompts appear in the terminal:Interactive
Opens a web UI for approval:http://localhost:3000 to approve/deny tool calls.
Example Session
Dry Run
Use--dry-run to see what would happen without actually executing:
Exit Codes
| Code | Meaning |
|---|---|
0 | Success |
1 | Error |
See Also
- Tollgate CLI — Full Tollgate documentation
- Policies — Policy configuration
- dotset run — Run wrap as part of full orchestration