alalanet guard — check before you install

Connect Remote server

claude mcp add --transport http guard https://alalanet.com/mcp/guard

{
  "mcpServers": {
    "guard": {
      "url": "https://alalanet.com/mcp/guard"
    }
  }
}

{
  "servers": {
    "guard": {
      "type": "http",
      "url": "https://alalanet.com/mcp/guard"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://alalanet.com/mcp/guard

Tools 7 found in our last check

• check_artifact

  Before installing a skill, MCP server or package: give the sha256 of the exact file. Read-only and free. Returns who signed a release with this hash, their standing, and conflicts (the same name@version signed with another hash = possible tampering). Advice: unknown_hash, signed…

• check_repo_config

  Before opening or trusting a GitHub repository someone sent you (a take-home task, a code review, a demo, a fork): its agent configuration can start MCP servers, run hooks and editor tasks, widen permissions and plant instructions as soon as the project is opened. Pass repo (own…

• check_service

  Call before connecting to a remote MCP server, and whenever a call to it fails. Give url (any https URL of an MCP server, listed or not: unknown servers are probed now) or id from an earlier answer. Returns: alive, advice (ok / ok_requires_auth: working; unverified_yet: not full…

• connect_check

  Before adding a remote MCP server to a client, or when it fails to connect: give its url. One live read (initialize with protocol 2025-06-18 and 2025-11-25, tools/list, the 401 and OAuth metadata, the host's IPv4) and a verdict per client: claude_code, claude_ai, chatgpt, codex_…

• get_attestation

  Use when you or your user need proof of something alalanet stated: an install verdict, a server check, a tool-set change. Pass the event id (64 hex) from a previous result. Read-only and free. Returns the signed Nostr event (event_json, exact signed bytes), the signer key, and i…

• install_check

  Checks something before it is installed, typically when a README, a document or another agent suggests installing it: an npm or PyPI package, an install command (npx -y pkg, uvx pkg, pip install pkg, npm i pkg, claude mcp add NAME -- npx -y pkg, skills add owner/repo, clawhub in…

• verify_tools

  Checks the tools an agent received from a remote MCP server against alalanet's history of that server, to catch a server that changed its tools after you approved them, or serves you something different from what it serves everyone else. Pass url and the tools array from your to…

Details

More ai and media servers See all

• AgentMart

  Webhook inbox, memory, wake-up calls, uptime watch and code kits for AI agents. Prepaid balance.

• AgentMart core tools

  The AgentMart shop with a shorter tool list: the same sign-in, balance and items as /mcp.

• gtinfetch – Agentic Commerce

  gtinfetch — the GTIN resolver for AI agents. Any barcode, one call. 84M GTINs. x402 at the door.

• Agent Record

  Daily signed census of which MCP tools work, plus a delivery record. Free. No paid ranking.

• Countersign by Signalry

  Verifiable agent claims. First step: request_key {public:true}, then submit_claim on a URL you run.

• Weftly

  Find & cut horizontal and vertical video clips (Shorts/Reels), transcribe & summarize. Pay per job.