Aguara MCP

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/garagon-mcp-aguara

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

5 read · 0 write · 0 deleteRead-only

Secrets

None asked for

Install scripts

Not scanned yet

Runs as

Docker image

Tools (5)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• check_mcp_config

  Check an MCP server configuration (JSON) for security issues before adding it to a client. Detects dangerous command shapes in `command`/`args`, credential exposure in `env`, unsafe argument injection, and tool-poisoning patterns. Use on any MCP server config block (`mcpServers` entries from Claude Desktop, Cursor, VS Code, etc.) before installing or enabling it. Sensitive matches are redacted in the response.

• discover_mcp

  Discover MCP server configurations on the local machine by reading known MCP client config files (Claude Desktop, Cursor, VS Code, Windsurf, and others). Returns the server definitions including commands, arguments, and environment variables. Read-only: this tool never executes the discovered commands and never connects to any server; pair with `check_mcp_config` to evaluate each definition before acting on it.

• explain_rule

  Get detailed information about a specific security rule by ID. Resolves both YAML rules (returns patterns plus true/false-positive examples) and analyzer-emitted rules from ci-trust, pkgmeta, jsrisk, pyrisk, rsbuild, npm-policy, pnpm-policy, agent-policy, NLP, toxic-flow, and rug-pull (returns severity, category, analyzer name, description, and remediation; analyzer rules have no inline patterns or examples).

• list_rules

  List the security rules cataloged by Aguara. Returns 250 detections (193 YAML pattern rules + 57 analyzer-emitted rules from ci-trust, pkgmeta, jsrisk, pyrisk, rsbuild, npm-policy, pnpm-policy, agent-policy, NLP, toxic-flow, and rug-pull analyzers) spanning multiple threat categories. Optionally filter by category (e.g. `prompt-injection`, `exfiltration`, `credential-leak`, `supply-chain`, `mcp-attack`, `toxic-flow`, `agent-trust`).

• scan_content

  Scan text for security threats before acting on it. Works on agent skills, READMEs, tool definitions, MCP server descriptions, prompts, package manifest content (package.json), GitHub Actions workflow YAML when filename contains `.github/workflows/`, Claude Code settings when filename is `.claude/settings.json` or `.claude/settings.local.json`, agent instruction files (`.cursorrules`, `.windsurfrules`, `.clinerules`, `AGENTS.md`, `copilot-instructions.md`), npm install-trust policy when filename is `.npmrc` or `package.json`, and pnpm policy when filename is `pnpm-workspace.yaml`. Detects prom…

Signals

Stars

4

Forks

0

Open issues

0

Last commit

Jul 1, 2026 (3 months ago)

Last release

Jul 1, 2026 (3 months ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

io.github.garagon/mcp-aguara

Version

0.8.0

Auth

No auth

Packages

oci ghcr.io/garagon/mcp-aguara:0.8.0

License

MIT

Repository

github.com/garagon/mcp-aguara

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql