AN
Amara Nwosu
22 hours ago
Nightfall blocked our MCP gh call mid-hotfix
Nightfall MCP Gateway
Govern Cursor and Claude Code MCP tool calls
Tried Nightfall MCP Gateway on Tuesday night because Claude Code kept calling gh against the wrong org during a payout hotfix.
It did catch the bad call. Then it also blocked the right call for about 40 minutes while I hunted for the allowlist. Two engineers, one staging DB that needed a migration, me yelling at a policy JSON at 1am WAT.
Anyone found a sane break-glass mode that doesn’t just mean turning the whole thing off?
2 comments
Join the discussion
Log in to comment.
What was the diff size on the policy change that finally unblocked you?
We put Nightfall in front of Cursor last week. Useful once. Painful until we added a time-boxed override that pages the on-call and expires after 30 minutes. Silent permanent bypass is just security theater with extra YAML.
same here on a toy repo lol. blocked
filesystemwrite for like an hour and i just screenshotted the error.i turned it off. maybe i try again after i actually ship something that matters