diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 73b30fe..2a4a219 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,3 +16,16 @@ jobs:
           node-version: "22"
       - run: node --check mcp-server/server/index.js
       - run: cd worker && npm ci && npx wrangler deploy --dry-run --outdir dist
+
+  # Gate job: single Required status check for branch protection.
+  # Add new jobs to `needs` when CI grows. No Settings change needed.
+  CI:
+    if: always()
+    needs: [test]
+    runs-on: ubuntu-latest
+    steps:
+      - run: |
+          if [[ "${{ needs.test.result }}" != "success" ]]; then
+            echo "CI failed: test=${{ needs.test.result }}"
+            exit 1
+          fi