Echo Gate#

Echo Gate is the control layer for agent tools: registry, permissions, API keys, receipts, limits, and paid-call readiness before an agent touches anything real.

Use this skill when a task involves:

• registering an agent-callable tool
• creating, listing, or revoking Echo Gate API keys
• calling a tool through the gateway
• checking receipts for tool calls
• operating the VPS service
• checking local gateway health
• preparing a tool for x402/Bankr paid access

Current Status#

• GitHub: https://github.com/BuiltByEcho/echo-gate
• npm package: @builtbyecho/echo-gate
• Local project: projects/echo-gate
• Package: @builtbyecho/echo-gate
• Default gateway: http://localhost:8787
• Default state path: ~/.config/echo-gate
• Status: public v0 local-first release.
• Convex mode: experimental opt-in only, not the default product path.

API Surface#

• GET /health
• GET /tools
• POST /tools
• POST /keys
• GET /keys
• DELETE /keys/:id
• PUT /keys/:id/policies/:slug
• POST /tools/:slug/call
• GET /receipts
• GET /approvals
• POST /approvals/:id/decision
• GET /approvals/:id/status

Admin routes require Authorization: Bearer <ECHO_GATE_ADMIN_TOKEN>.

Tool calls require Authorization: Bearer egk_....

CLI#

From the project root:

bash

npm install -g @builtbyecho/echo-gate
echo-gate

From source:

bash

npm run build
npm test
node bin/echo-gate.js health
node bin/echo-gate.js tools
node bin/echo-gate.js create-key --name demo --tool echo
node bin/echo-gate.js call echo --json '{"hello":"world"}'
node bin/echo-gate.js receipts
node bin/echo-gate.js keys
node bin/echo-gate.js revoke-key <id>

Use env vars:

• ECHO_GATE_URL
• ECHO_GATE_KEY
• ECHO_GATE_ADMIN_TOKEN

Operations#

Use local-first mode unless Dustin explicitly asks for remote deployment:

bash

npm run build
npm test

Check local health:

bash

curl -sS http://localhost:8787/health

Do not paste or store the admin token in chat, docs, memory, commits, or public issue comments.

Release Rules#

• Do not publish API keys.
• Keep echo as the smoke tool until real adapters are ready.
• Before release or announcement, verify build, tests, local health, unauthenticated 401, valid-key call, receipt write, and key revocation.
• x402/Bankr paid tool calls are planned, not live yet.