Show HN: ScopeGate – Granular permission gateway for AI agents (MCP, open-core)

88% of orgs have had AI agent security incidents, yet MCP servers run broad OAuth scopes with no way to restrict per agent.

After reading about the GitHub MCP exploit I got tired of cobbling together OAuth + custom middleware + prayer. ScopeGate is a permission proxy that sits between your AI agents and external services (Google Drive, Gmail, Calendar, etc).

You connect a service via OAuth, define granular scopes per agent (read-only, specific folders, rate limits), and get a unique MCP endpoint. Agent A can read one Drive folder but not write. Agent B can send email but not read inbox. One click revokes access across all services instantly.

Open-core, self-hostable — same features on cloud and self-hosted.