Film · 1:19

How to install the mcpindex gate in Claude Desktop, Cursor or VS Code

Two commands, no pipe-to-shell. The wizard wires every MCP host it finds, marks each entry it rewrites so one command unwires it, and pins every tool on the first tools/list. Then nothing happens until your first hold. Also covers the browser-only scan if you are not ready to put anything in your call path, and the SDK path if you are building your own agent.

What happens, and when

  1. INSTALL0:00
  2. THE ZERO-INSTALL TRY0:28
  3. BUILDING YOUR OWN0:41
  4. CHECK THE RECORD, THEN CLOSE0:59

Full transcript

Timestamps match the key moments above. Figures spoken in the film are stated as of the date shown on screen - they are measurements, not live numbers. The live record is in the public ledger.

0:00 · INSTALL

The gate is two commands. If you run MCP servers in Claude Desktop, Cursor, VS Code, or five other hosts, the wizard rewrites each host config to route your servers through it, and marks every entry it touches so one command unwires it. Restart, and the first tools/list pins every tool you have. Then nothing happens. That silence is the gate working. The next thing you see is your first hold.

On screen: no pipe-to-shell · Claude Desktop · Claude Code · Cursor · VS Code · Windsurf · Cline · Gemini CLI · Zed · every wired entry marked · mcpindex-config-wire unwire restores it in place · this is the gate. the directory client is a different job and cannot stop a call. · each ships more than one way. check the job, not the registry.

0:28 · THE ZERO-INSTALL TRY

Not ready to put anything in your call path? Your mcp.json holds your tokens. Paste it at mcpindex.ai/scan: it runs in your browser and never leaves it.

On screen: mcpindex.ai/scan · runs in your browser · the file never leaves it · MCP servers connected · remote - can change on you · spawn a local process · carry a credential

0:41 · BUILDING YOUR OWN

Building your own agent? One line wraps an MCP session: the same diff and the same hold, in your code, with a pin you point at wherever you keep it. Turn on result scanning and it also reads what comes back before your agent does. Check the licence before you ship.

On screen: wrap(session, { pin, serverId }): pin · diff · HOLD · bare wrap(session) pins in memory only - it dies with the process · result scan: opt-in · withholds under strict · @mcp-index/sdk · PolyForm Noncommercial · mcpindex-gate · @mcp-index/mastra · MIT · the model never sees the gate. your code does. · mcpindex.ai/docs

0:59 · CHECK THE RECORD, THEN CLOSE

Every contract-affecting change we surface is public. So is our census of how much of the registry's own source has gone dark, our own listings included. The dataset is deposited with a DOI and the measurement is a preprint. Start at mcpindex.ai/install.

On screen: /ledger · public · 1 in 7 referenced repositories not publicly accessible · census of 2026-07-20 · 6,882 of the 23,617 tools we saw drift · description-only change is stored, not surfaced · DOI 10.5281/zenodo.21449150 · arXiv:2608.00997 · questions: hello@mcpindex.ai · mcpindex.ai/install