MCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.
Connect Runs on your machine
claude mcp add agentguard -e AGENTGUARD_CONFIG=<AGENTGUARD_CONFIG> -e AGENTGUARD_KILL=<AGENTGUARD_KILL> -- npx -y @agentwares/[email protected]
{
"mcpServers": {
"agentguard": {
"command": "npx",
"args": [
"-y",
"@agentwares/[email protected]"
],
"env": {
"AGENTGUARD_CONFIG": "<AGENTGUARD_CONFIG>",
"AGENTGUARD_KILL": "<AGENTGUARD_KILL>"
}
}
}
}
{
"mcpServers": {
"agentguard": {
"command": "npx",
"args": [
"-y",
"@agentwares/[email protected]"
],
"env": {
"AGENTGUARD_CONFIG": "<AGENTGUARD_CONFIG>",
"AGENTGUARD_KILL": "<AGENTGUARD_KILL>"
}
}
}
}
{
"servers": {
"agentguard": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@agentwares/[email protected]"
],
"env": {
"AGENTGUARD_CONFIG": "<AGENTGUARD_CONFIG>",
"AGENTGUARD_KILL": "<AGENTGUARD_KILL>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
AGENTGUARD_CONFIGOptional | Path to agentguard.yaml (default ./agentguard.yaml). If unset and that file does not exist, agentguard serves only its own read-only tools: agentguard_get_status, agentguard_get_report, agentguard_verify_audit_log |
AGENTGUARD_KILLOptional | Set to 1 to halt every tool call (kill switch) |
Details
| Package | @agentwares/[email protected] (NPM, stdio) |
| First published | 7 Oct 2026 |
| Last updated | 7 Oct 2026 |
| Registry name | io.github.agentwares/agentguard |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
