AgentGuard

io.github.MerchantGuard/agentguard · v0.3.1

Local spend caps, kill-switch blocking and Ed25519-signed receipts for AI agent tool calls.

Website Source code Set it up

Connect Runs on your machine

Terminal

claude mcp add agentguard -e AGENTGUARD_MCP_DAILY_CAP_CENTS=<AGENTGUARD_MCP_DAILY_CAP_CENTS> -e AGENTGUARD_MCP_PER_CALL_CAP_CENTS=<AGENTGUARD_MCP_PER_CALL_CAP_CENTS> -e AGENTGUARD_MCP_TENANT=<AGENTGUARD_MCP_TENANT> -e AGENTGUARD_HOME=<AGENTGUARD_HOME> -e AGENTGUARD_MCP_LEDGER=<AGENTGUARD_MCP_LEDGER> -e AGENTGUARD_MCP_DISABLE_COST_OVERRIDE=<AGENTGUARD_MCP_DISABLE_COST_OVERRIDE> -e AGENTGUARD_LOCK_COST_OVERRIDES=<AGENTGUARD_LOCK_COST_OVERRIDES> -e AGENTGUARD_ACTOR_DIGEST=<AGENTGUARD_ACTOR_DIGEST> -e AGENTGUARD_LICENSE_KEY=<AGENTGUARD_LICENSE_KEY> -e AGENTGUARD_LICENSE_ENDPOINT=<AGENTGUARD_LICENSE_ENDPOINT> -e AGENTGUARD_NO_BEACON=<AGENTGUARD_NO_BEACON> -e AGENTGUARD_TELEMETRY=<AGENTGUARD_TELEMETRY> -e AGENTGUARD_INSTALL_ID=<AGENTGUARD_INSTALL_ID> -e AGENTGUARD_ANONYMOUS_INSTALL_ID=<AGENTGUARD_ANONYMOUS_INSTALL_ID> -e CI=<CI> -e GITHUB_ACTIONS=<GITHUB_ACTIONS> -e GITLAB_CI=<GITLAB_CI> -e CIRCLECI=<CIRCLECI> -e BUILDKITE=<BUILDKITE> -e VERCEL=<VERCEL> -e NETLIFY=<NETLIFY> -- npx -y @agentguard-run/[email protected]

claude_desktop_config.json

{
  "mcpServers": {
    "agentguard": {
      "command": "npx",
      "args": [
        "-y",
        "@agentguard-run/[email protected]"
      ],
      "env": {
        "AGENTGUARD_MCP_DAILY_CAP_CENTS": "<AGENTGUARD_MCP_DAILY_CAP_CENTS>",
        "AGENTGUARD_MCP_PER_CALL_CAP_CENTS": "<AGENTGUARD_MCP_PER_CALL_CAP_CENTS>",
        "AGENTGUARD_MCP_TENANT": "<AGENTGUARD_MCP_TENANT>",
        "AGENTGUARD_HOME": "<AGENTGUARD_HOME>",
        "AGENTGUARD_MCP_LEDGER": "<AGENTGUARD_MCP_LEDGER>",
        "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE": "<AGENTGUARD_MCP_DISABLE_COST_OVERRIDE>",
        "AGENTGUARD_LOCK_COST_OVERRIDES": "<AGENTGUARD_LOCK_COST_OVERRIDES>",
        "AGENTGUARD_ACTOR_DIGEST": "<AGENTGUARD_ACTOR_DIGEST>",
        "AGENTGUARD_LICENSE_KEY": "<AGENTGUARD_LICENSE_KEY>",
        "AGENTGUARD_LICENSE_ENDPOINT": "<AGENTGUARD_LICENSE_ENDPOINT>",
        "AGENTGUARD_NO_BEACON": "<AGENTGUARD_NO_BEACON>",
        "AGENTGUARD_TELEMETRY": "<AGENTGUARD_TELEMETRY>",
        "AGENTGUARD_INSTALL_ID": "<AGENTGUARD_INSTALL_ID>",
        "AGENTGUARD_ANONYMOUS_INSTALL_ID": "<AGENTGUARD_ANONYMOUS_INSTALL_ID>",
        "CI": "<CI>",
        "GITHUB_ACTIONS": "<GITHUB_ACTIONS>",
        "GITLAB_CI": "<GITLAB_CI>",
        "CIRCLECI": "<CIRCLECI>",
        "BUILDKITE": "<BUILDKITE>",
        "VERCEL": "<VERCEL>",
        "NETLIFY": "<NETLIFY>"
      }
    }
  }
}

~/.cursor/mcp.json

{
  "mcpServers": {
    "agentguard": {
      "command": "npx",
      "args": [
        "-y",
        "@agentguard-run/[email protected]"
      ],
      "env": {
        "AGENTGUARD_MCP_DAILY_CAP_CENTS": "<AGENTGUARD_MCP_DAILY_CAP_CENTS>",
        "AGENTGUARD_MCP_PER_CALL_CAP_CENTS": "<AGENTGUARD_MCP_PER_CALL_CAP_CENTS>",
        "AGENTGUARD_MCP_TENANT": "<AGENTGUARD_MCP_TENANT>",
        "AGENTGUARD_HOME": "<AGENTGUARD_HOME>",
        "AGENTGUARD_MCP_LEDGER": "<AGENTGUARD_MCP_LEDGER>",
        "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE": "<AGENTGUARD_MCP_DISABLE_COST_OVERRIDE>",
        "AGENTGUARD_LOCK_COST_OVERRIDES": "<AGENTGUARD_LOCK_COST_OVERRIDES>",
        "AGENTGUARD_ACTOR_DIGEST": "<AGENTGUARD_ACTOR_DIGEST>",
        "AGENTGUARD_LICENSE_KEY": "<AGENTGUARD_LICENSE_KEY>",
        "AGENTGUARD_LICENSE_ENDPOINT": "<AGENTGUARD_LICENSE_ENDPOINT>",
        "AGENTGUARD_NO_BEACON": "<AGENTGUARD_NO_BEACON>",
        "AGENTGUARD_TELEMETRY": "<AGENTGUARD_TELEMETRY>",
        "AGENTGUARD_INSTALL_ID": "<AGENTGUARD_INSTALL_ID>",
        "AGENTGUARD_ANONYMOUS_INSTALL_ID": "<AGENTGUARD_ANONYMOUS_INSTALL_ID>",
        "CI": "<CI>",
        "GITHUB_ACTIONS": "<GITHUB_ACTIONS>",
        "GITLAB_CI": "<GITLAB_CI>",
        "CIRCLECI": "<CIRCLECI>",
        "BUILDKITE": "<BUILDKITE>",
        "VERCEL": "<VERCEL>",
        "NETLIFY": "<NETLIFY>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "agentguard": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@agentguard-run/[email protected]"
      ],
      "env": {
        "AGENTGUARD_MCP_DAILY_CAP_CENTS": "<AGENTGUARD_MCP_DAILY_CAP_CENTS>",
        "AGENTGUARD_MCP_PER_CALL_CAP_CENTS": "<AGENTGUARD_MCP_PER_CALL_CAP_CENTS>",
        "AGENTGUARD_MCP_TENANT": "<AGENTGUARD_MCP_TENANT>",
        "AGENTGUARD_HOME": "<AGENTGUARD_HOME>",
        "AGENTGUARD_MCP_LEDGER": "<AGENTGUARD_MCP_LEDGER>",
        "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE": "<AGENTGUARD_MCP_DISABLE_COST_OVERRIDE>",
        "AGENTGUARD_LOCK_COST_OVERRIDES": "<AGENTGUARD_LOCK_COST_OVERRIDES>",
        "AGENTGUARD_ACTOR_DIGEST": "<AGENTGUARD_ACTOR_DIGEST>",
        "AGENTGUARD_LICENSE_KEY": "<AGENTGUARD_LICENSE_KEY>",
        "AGENTGUARD_LICENSE_ENDPOINT": "<AGENTGUARD_LICENSE_ENDPOINT>",
        "AGENTGUARD_NO_BEACON": "<AGENTGUARD_NO_BEACON>",
        "AGENTGUARD_TELEMETRY": "<AGENTGUARD_TELEMETRY>",
        "AGENTGUARD_INSTALL_ID": "<AGENTGUARD_INSTALL_ID>",
        "AGENTGUARD_ANONYMOUS_INSTALL_ID": "<AGENTGUARD_ANONYMOUS_INSTALL_ID>",
        "CI": "<CI>",
        "GITHUB_ACTIONS": "<GITHUB_ACTIONS>",
        "GITLAB_CI": "<GITLAB_CI>",
        "CIRCLECI": "<CIRCLECI>",
        "BUILDKITE": "<BUILDKITE>",
        "VERCEL": "<VERCEL>",
        "NETLIFY": "<NETLIFY>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

Name	Description
`AGENTGUARD_MCP_DAILY_CAP_CENTS` Optional	Local daily spend cap in cents. A nonnegative integer.
`AGENTGUARD_MCP_PER_CALL_CAP_CENTS` Optional	Local per-call spend cap in cents. A nonnegative integer.
`AGENTGUARD_MCP_TENANT` Optional	Tenant identifier stamped into local receipts.
`AGENTGUARD_HOME` Optional	Local signing-key, configuration and ledger directory. Defaults to .agentguard in the operating system home directory.
`AGENTGUARD_MCP_LEDGER` Optional	Local decision storage. ndjson persists receipts across restarts; memory retains this process only.
`AGENTGUARD_MCP_DISABLE_COST_OVERRIDE` Optional	Set to 1 to discard and prevent model pricing overrides for this server.
`AGENTGUARD_LOCK_COST_OVERRIDES` Optional	Spend SDK startup lock. Set to 1 to prevent model pricing overrides.
`AGENTGUARD_ACTOR_DIGEST` Optional	Set to 1 to hash actor identifiers before they enter local receipts.
`AGENTGUARD_LICENSE_KEY` Optional, secret	Optional AgentGuard license key for license validation and seat registration. Otherwise read from local configuration.
`AGENTGUARD_LICENSE_ENDPOINT` Optional	License and seat service base URL. No prompts, tool content or receipts are sent.
`AGENTGUARD_NO_BEACON` Optional	Set to 1 to disable optional activation telemetry regardless of saved consent.
`AGENTGUARD_TELEMETRY` Optional	Set to 1 to opt in to content-free activation telemetry. Otherwise saved consent applies, default off.
`AGENTGUARD_INSTALL_ID` Optional	Optional identifier used only by opted-in activation telemetry when no saved install identifier exists.
`AGENTGUARD_ANONYMOUS_INSTALL_ID` Optional	Legacy fallback for AGENTGUARD_INSTALL_ID in opted-in activation telemetry.
`CI` Optional	Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
`GITHUB_ACTIONS` Optional	Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
`GITLAB_CI` Optional	Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
`CIRCLECI` Optional	Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
`BUILDKITE` Optional	Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
`VERCEL` Optional	Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
`NETLIFY` Optional	Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.

Details

Package	`@agentguard-run/[email protected]` (NPM, stdio)
First published	21 Sep 2026
Last updated	21 Sep 2026
Registry name	`io.github.MerchantGuard/agentguard`

More ai and media servers See all

Live status

Local install

Installed and run on your own machine, so there is no public endpoint to check.

Pair it with live search

Agents that use AgentGuard often also need current facts. NestDaddy MCP gives your AI today's internet: web search, real-time breaking news and full page reading in one connector.

See NestDaddy MCP

For maintainers

[![NestDaddy MCP](https://nestdaddy.com/mcp/servers/io-github-merchantguard-agentguard/badge.svg)](https://nestdaddy.com/mcp/servers/io-github-merchantguard-agentguard)

Add the badge to your README. It turns green while your server passes our daily check. Listing details come from the official MCP registry; update them there.

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.