agentguard — policy proxy for agent tool calls
Free spend report from an agent log, no key. Hosted proxies: caps, audit export, buy calls.
Connect Remote server
claude mcp add --transport http agentguard-cloud https://agentwares-agentguard.vercel.app/api/mcp --header "Authorization: Bearer <YOUR_API_KEY>"
{
"mcpServers": {
"agentguard-cloud": {
"url": "https://agentwares-agentguard.vercel.app/api/mcp",
"headers": {
"Authorization": "Bearer <YOUR_API_KEY>"
}
}
}
}
{
"servers": {
"agentguard-cloud": {
"type": "http",
"url": "https://agentwares-agentguard.vercel.app/api/mcp",
"headers": {
"Authorization": "Bearer <YOUR_API_KEY>"
}
}
}
}
Settings > Connectors > Add custom connector
URL: https://agentwares-agentguard.vercel.app/api/mcp
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools 7 found in our last check
okgate_get_pricingMachine-readable pricing for okgate hosted: bands (Starter/Pro/Team) with included tool calls per month, the 80% soft alert and 150% hard stop, features, the free trial allowance, `per_call` — buying tool calls outright at POST /api/v1/calls from a prepaid balance, which is the…
okgate_spend_reportRead an agent log and report what it spent: totals, calls by tool and by class, estimated dollars by rail, loops, the largest single run, and — for every overspend — the okgate band whose cap would have stopped it, the exact cap, and the call that would have tripped it. Needs no…
okgate_create_proxyCreate a hosted okgate proxy in front of an MCP server. Returns the proxy id, the per-customer MCP URL and the proxy key (shown once). Point your agent's MCP client at the URL with `Authorization: Bearer <key>`. Requires an account key.
okgate_set_policyReplace a proxy's policy (YAML: mode, upstreams, classify, caps, loop, dry_run, approvals, alerts, chaos, drift). Validated before saving; takes effect within 30 seconds. Requires an account key.
okgate_get_runThe incident-shaped report for one run: counts (calls, reads, writes, faked, blocked, spend), the call timeline with decisions, dry-run mutations (what would have changed), ledger entries and the audit-chain verification. Requires an account key.
okgate_export_auditExport a run's hash-chained audit entries (prev_hash, hash, redacted args) with the Merkle root, for disputes and questionnaires. Verify offline with sha256(prev_hash + canonical(entry)). Requires an account key.
okgate_recommend_allowlistLeast-privilege recommendation from the proxy's recorded calls: the minimal tool allowlist, argument keys used per tool, and the upstream tools never used (remove them first). No LLM call here; apply it in the dashboard. Requires an account key.
Headers
| Name | Description |
|---|---|
AuthorizationOptional, secret | Bearer <account key>. POST /api/v1/signup {"accept_terms": true} for one — no human, no card. agentguard_spend_report and agentguard_get_pricing work without it. |
Details
| Endpoint | https://agentwares-agentguard.vercel.app/api/mcp (Streamable HTTP) |
| First published | 14 Sep 2026 |
| Last updated | 14 Sep 2026 |
| Registry name | io.github.agentwares/agentguard-cloud |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
