Agent Guard MCP

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/liminalpepe-agent-guard-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

4 read · 0 write · 0 deleteRead-only

Secrets

None asked for

Install scripts

Not scanned yet

Runs as

Node.js package

Tools (4)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• check_package

  Pre-install supply-chain gate for a single npm or PyPI package. Call BEFORE running npm install, pip install, or adding a dependency to package.json. Returns OK | SUSPICIOUS | DANGER (DANGER ~= NO-GO) with typosquat/slopsquat/hallucination flags. Read-only: queries public registries only; does not install anything. Do NOT use for full lockfile audits (use verify_lockfile) or CVE-only scans (use npm audit/OSV). If verdict is SUSPICIOUS or DANGER, stop and ask the user before installing.

• check_workflow

  Validate CI workflow YAML (GitHub Actions / GitLab CI) BEFORE merging a PR that touches .github/workflows or GitLab CI. Call when reviewing or authoring CI pipelines. Flags mutable action pins (@v1), known-compromised actions, untrusted owners, curl|bash fetch-exec, pull_request_target pwn-request patterns, and secret exposure. Returns risk 0-100 and PROCEED | REVIEW | BLOCK. Read-only. Do NOT use for dependency lockfiles (use verify_lockfile). Default platform: github-actions. CI-workflow coverage is unique to agent-guard.

• score_manifest

  Score a third-party AI-agent extension manifest (skill/plugin manifest audit) BEFORE install. Call BEFORE installing a Cursor skill, Claude skill, MCP server package, or Smithery plugin. Detects poison/backdoor signatures, credential scope over-reach, and drift vs an approved baseline. Returns risk 0-100 and PROCEED | REVIEW | BLOCK. Supports manifest_type: cursor-skill | claude-skill | mcp-server | smithery-package. Read-only. Do NOT use for npm package names alone (use check_package). If BLOCK, refuse install until the user reviews findings. This skill/plugin coverage is unique to agent-guar…

• verify_lockfile

  Scan an entire lockfile (direct + transitive deps) BEFORE npm/pip/yarn/pnpm install. Call when the user pastes or generates a lockfile, or before trusting an LLM-written package-lock.json / yarn.lock / pnpm-lock.yaml / poetry.lock / requirements.txt. Returns per-package OK | SUSPICIOUS | DANGER counts and flagged names. Read-only; pass raw file text, not a filesystem path. Do NOT use for a single new package (use check_package) or CI YAML (use check_workflow).

Signals

Stars

0

Forks

0

Open issues

0

Weekly downloads

10

Last commit

Jul 2, 2026 (3 months ago)

Last release

Jul 2, 2026 (3 months ago)

Last package publish

Jul 1, 2026 (3 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.liminalpepe/agent-guard-mcp

Version

0.2.1

Auth

No auth

Packages

npm @liminallablibs/agent-guard-mcp

License

MIT

Repository

github.com/liminalpepe/agent-guard-mcp

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql