GuardLayer

Connect Remote server

claude mcp add --transport http guardlayer https://www.guardlayer.io/api/mcp

{
  "mcpServers": {
    "guardlayer": {
      "url": "https://www.guardlayer.io/api/mcp"
    }
  }
}

{
  "servers": {
    "guardlayer": {
      "type": "http",
      "url": "https://www.guardlayer.io/api/mcp"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://www.guardlayer.io/api/mcp

Tools 3 found in our last check

• scan_files

  Static security scan of a Next.js + Supabase codebase: secrets in code or public env vars (NEXT_PUBLIC_, VITE_), service role keys in client code, RLS off or open policies in supabase/migrations, unauthenticated API routes, Server Actions and Edge Functions, unsafe redirects and…

• get_supabase_snapshot_sql

  Returns the read-only SQL for the live Supabase check and how to run it. It reads only catalog metadata (table and column names, RLS flags, policies, grants, triggers, SECURITY DEFINER functions, bucket settings), never table rows, and returns one JSON value.

• check_supabase_snapshot

  Checks the JSON from get_supabase_snapshot_sql: tables anyone can read, RLS off, policies that only check for a signed-in user (public in practice when sign-ups are open), users who can update their own role or plan columns, exposed SECURITY DEFINER functions, public buckets. Pa…

Details

More databases servers See all

• VibeScale

  Pre-launch checks for AI-built apps: leaked keys, Supabase RLS gaps, browser-exposed env vars.

• Imf Mcp Server

  Query IMF SDMX 3.0 macroeconomic dataflows — WEO, BOP, CPI, exchange rates, 190 countries.

• Apex DB

  Vehicle specifications, emissions, and powertrain data with source provenance.

• TrialBase DB

  Clinical trials across multiple registries with identifiers and source links.

• PatchLabs

  Security checks for AI-built apps (Lovable, Supabase, Bolt): RLS, headers, monitoring, fixes.

• Tidy Byte Tools API

  Remote MCP for JSON repair, hashing, formatting, IDs, dates, units, and other small tools.