PassTunnel
io.github.PassTunnel/passtunnel
macOS OpenVPN/FortiGate VPN status, logs and diagnosis; read-only by default, never returns secrets
Install surfaces
How PassTunnel runs, per the official MCP registry entry.
- mcpb
https://github.com/passtunnel/passtunnel/releases/download/v1.8.0/[email protected]
Governed execution
How KLA gates calls to PassTunnel once it is connected.
A published policy defines which PassTunnel actions an agent may take and under what conditions. Each call passes through a policy gate at the tool-call boundary. Permitted actions execute, with the policy basis recorded. Flagged actions execute and are sampled for scheduled human review. High-stakes actions pause and route to a named reviewer on the Decision Desk. The call, the policy decision, and any approval are sealed as an evidence record.
KLA also governs the agents and model providers you already run. See integrations.