AgentGuard

{
  "name": "io.github.MerchantGuard/agentguard",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "description": "Local spend caps, kill-switch blocking and Ed25519-signed receipts for AI agent tool calls. Runs on the developer's machine. Zero data plane: prompts and tool calls never pass through this server."
    }
  },
  "title": "AgentGuard",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "0.3.1",
  "packages": [
    {
      "version": "0.3.1",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@agentguard-run/mcp",
      "runtimeHint": "npx",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "AGENTGUARD_MCP_DAILY_CAP_CENTS",
          "format": "number",
          "default": "500",
          "description": "Local daily spend cap in cents. A nonnegative integer."
        },
        {
          "name": "AGENTGUARD_MCP_PER_CALL_CAP_CENTS",
          "format": "number",
          "default": "100",
          "description": "Local per-call spend cap in cents. A nonnegative integer."
        },
        {
          "name": "AGENTGUARD_MCP_TENANT",
          "format": "string",
          "default": "mcp-local",
          "description": "Tenant identifier stamped into local receipts."
        },
        {
          "name": "AGENTGUARD_HOME",
          "format": "filepath",
          "description": "Local signing-key, configuration and ledger directory. Defaults to .agentguard in the operating system home directory."
        },
        {
          "name": "AGENTGUARD_MCP_LEDGER",
          "format": "string",
          "choices": [
            "ndjson",
            "memory"
          ],
          "default": "ndjson",
          "description": "Local decision storage. ndjson persists receipts across restarts; memory retains this process only."
        },
        {
          "name": "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE",
          "format": "string",
          "choices": [
            "0",
            "1"
          ],
          "default": "0",
          "description": "Set to 1 to discard and prevent model pricing overrides for this server."
        },
        {
          "name": "AGENTGUARD_LOCK_COST_OVERRIDES",
          "format": "string",
          "choices": [
            "0",
            "1"
          ],
          "default": "0",
          "description": "Spend SDK startup lock. Set to 1 to prevent model pricing overrides."
        },
        {
          "name": "AGENTGUARD_ACTOR_DIGEST",
          "format": "string",
          "choices": [
            "0",
            "1"
          ],
          "default": "0",
          "description": "Set to 1 to hash actor identifiers before they enter local receipts."
        },
        {
          "name": "AGENTGUARD_LICENSE_KEY",
          "format": "string",
          "isSecret": true,
          "description": "Optional AgentGuard license key for license validation and seat registration. Otherwise read from local configuration."
        },
        {
          "name": "AGENTGUARD_LICENSE_ENDPOINT",
          "format": "string",
          "default": "https://agentguard.run",
          "description": "License and seat service base URL. No prompts, tool content or receipts are sent."
        },
        {
          "name": "AGENTGUARD_NO_BEACON",
          "format": "string",
          "choices": [
            "0",
            "1"
          ],
          "default": "0",
          "description": "Set to 1 to disable optional activation telemetry regardless of saved consent."
        },
        {
          "name": "AGENTGUARD_TELEMETRY",
          "format": "string",
          "choices": [
            "0",
            "1"
          ],
          "default": "0",
          "description": "Set to 1 to opt in to content-free activation telemetry. Otherwise saved consent applies, default off."
        },
        {
          "name": "AGENTGUARD_INSTALL_ID",
          "format": "string",
          "description": "Optional identifier used only by opted-in activation telemetry when no saved install identifier exists."
        },
        {
          "name": "AGENTGUARD_ANONYMOUS_INSTALL_ID",
          "format": "string",
          "description": "Legacy fallback for AGENTGUARD_INSTALL_ID in opted-in activation telemetry."
        },
        {
          "name": "CI",
          "format": "string",
          "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
        },
        {
          "name": "GITHUB_ACTIONS",
          "format": "string",
          "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
        },
        {
          "name": "GITLAB_CI",
          "format": "string",
          "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
        },
        {
          "name": "CIRCLECI",
          "format": "string",
          "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
        },
        {
          "name": "BUILDKITE",
          "format": "string",
          "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
        },
        {
          "name": "VERCEL",
          "format": "string",
          "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
        },
        {
          "name": "NETLIFY",
          "format": "string",
          "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/MerchantGuard/agentguard-mcp",
    "source": "github"
  },
  "websiteUrl": "https://agentguard.run",
  "description": "Local spend caps, kill-switch blocking and Ed25519-signed receipts for AI agent tool calls."
}