Quill
Approve risky agent tool calls with Touch ID and keep a tamper-evident log before destructive automation ships.
Overview
Quill is a MCP server for the Ship phase that gates AI-agent tool calls behind Touch ID approval and writes a tamper-evident audit log.
What is this MCP server?
- Pre-execution gate intercepts AI-agent tool calls before they run
- Touch ID approval on supported Apple hardware for high-risk actions
- Tamper-evident audit log for accountability and post-incident review
- PyPI package quillx (v0.2.0a5) with uvx runtime hint and stdio MCP
- Alpha-stage security MCP—pair with agent workflows, not replace full IAM
- Version 0.2.0a5 (alpha)
- PyPI identifier: quillx
- Transport: stdio
What problem does it solve?
Autonomous agents can run dangerous tools instantly with no human checkpoint or trustworthy record of what executed.
Who is it for?
Mac-based solo builders running powerful MCP tools who need explicit approval and logging before production agent automation.
Skip if: Teams that need enterprise SSO-only gates without local biometrics, or builders who never expose write/delete tools to agents.
What do I get? / Deliverables
After setup, sensitive tool invocations wait for your approval and leave an auditable trail you can review after shipping agent features.
- Intercepted tool-call pipeline with explicit approval step
- Tamper-evident audit log of agent tool executions
- Lower blast radius before shipping autonomous agent features
Recommended MCP Servers
Journey fit
How it compares
Agent tool-call gate and audit MCP, not a vulnerability scanner or a generic code-review skill.
Common Questions / FAQ
Who is Quill for?
Solo and small-team builders who deploy AI agents with real side effects and want Touch ID approval plus tamper-evident logging on Apple setups.
When should I use Quill?
Use it in the ship and security subphase when wiring MCP tools that can modify systems, spend money, or leak data if mis-invoked.
How do I add Quill to my agent?
Install quillx from PyPI via uvx or your Python workflow, register the stdio MCP server in Claude Code or Cursor, and route high-risk tools through Quill’s gate per its docs.