Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "agentguard-cloud": {
      "type": "http",
      "url": "https://agentwares-agentguard.vercel.app/api/mcp",
      "headers": {
        "Authorization": "Bearer ${AGENTGUARD_CLOUD_TOKEN}"
      }
    }
  }
}

claude mcp add --transport http agentguard-cloud https://agentwares-agentguard.vercel.app/api/mcp --header "Authorization: Bearer ${AGENTGUARD_CLOUD_TOKEN}"

[mcp_servers.agentguard-cloud]
url = "https://agentwares-agentguard.vercel.app/api/mcp"
bearer_token_env_var = "AGENTGUARD_CLOUD_TOKEN"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "agentguard-cloud": {
      "type": "remote",
      "url": "https://agentwares-agentguard.vercel.app/api/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:AGENTGUARD_CLOUD_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "agentguard-cloud": {
      "type": "http",
      "url": "https://agentwares-agentguard.vercel.app/api/mcp",
      "headers": {
        "Authorization": "Bearer ${AGENTGUARD_CLOUD_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=agentguard-cloud&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYWdlbnR3YXJlcy1hZ2VudGd1YXJkLnZlcmNlbC5hcHAvYXBpL21jcCIsImhlYWRlcnMiOnsiQXV0aG9yaXphdGlvbiI6IkJlYXJlciAke0FHRU5UR1VBUkRfQ0xPVURfVE9LRU59In19"
}

{
  "servers": {
    "agentguard-cloud": {
      "type": "http",
      "url": "https://agentwares-agentguard.vercel.app/api/mcp",
      "headers": {
        "Authorization": "Bearer ${AGENTGUARD_CLOUD_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "agentguard-cloud": {
      "httpUrl": "https://agentwares-agentguard.vercel.app/api/mcp",
      "headers": {
        "Authorization": "Bearer ${AGENTGUARD_CLOUD_TOKEN}"
      }
    }
  }
}

extensions:
  "agentguard-cloud":
    enabled: true
    name: "agentguard-cloud"
    type: streamable_http
    uri: "https://agentwares-agentguard.vercel.app/api/mcp"
    headers:
      "Authorization": "Bearer ${AGENTGUARD_CLOUD_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${AGENTGUARD_CLOUD_TOKEN}. The registry never accepts secret values.

Quality 95 / 100strong

protocol100 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
pass
protocol.list_ttltool list is cacheable (ttlMs 300000)

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations7 of 7 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 1,514 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability75 · weight 15

warn
stability.changes23 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

7 tools, about 1,514 tokens to load them all · tool set cde60812a8a8 · tools last changed 2026-10-12 · checked 2026-10-19 10:20 UTC

Tool changes

2026-10-12okgate_get_pricingchangeddescription
before
Machine-readable pricing for okgate hosted: bands (Starter/Pro/Team) with included tool calls per month, the 80% soft alert and 150% hard stop, features, the free trial allowance, `per_call` — buying tool calls outright at POST /api/v1/calls from a prepaid balance, which is the one purchase here an unattended agent can complete — and `one_time`: the $49 EU AI Act Article 50 readiness report, paid once by a person on Stripe Checkout. Same data as /pricing.json.
after · 93% of words in common
Machine-readable pricing for okgate hosted: bands (Starter/Pro/Team) with included tool calls per month, the 80% soft alert and 150% hard stop, features, the free trial allowance, `per_call` — buying tool calls outright at POST /api/v1/calls from a prepaid balance, which is the one purchase here an unattended agent can complete — and `one_time`: reports a person pays for once on Stripe Checkout, such as the $49 EU AI Act Article 50 readiness report. Same data as /pricing.json.
2026-10-10okgate_get_pricingchangeddescription
before
Machine-readable pricing for okgate hosted: bands (Starter/Pro/Team) with included tool calls per month, the 80% soft alert and 150% hard stop, features, the free trial allowance, and `per_call` — buying tool calls outright at POST /api/v1/calls from a prepaid balance, which is the one purchase here an unattended agent can complete. Same data as /pricing.json.
after · 77% of words in common
Machine-readable pricing for okgate hosted: bands (Starter/Pro/Team) with included tool calls per month, the 80% soft alert and 150% hard stop, features, the free trial allowance, `per_call` — buying tool calls outright at POST /api/v1/calls from a prepaid balance, which is the one purchase here an unattended agent can complete — and `one_time`: the $49 EU AI Act Article 50 readiness report, paid once by a person on Stripe Checkout. Same data as /pricing.json.
2026-10-09okgate_recommend_allowlistchangedannotations
2026-10-09okgate_export_auditchangedannotations
2026-10-09okgate_get_runchangedannotations
2026-10-09okgate_set_policychangedannotations
2026-10-09okgate_create_proxychangedannotations
2026-10-09okgate_spend_reportchangedannotations
2026-10-09okgate_get_pricingchangedannotations
2026-10-09agentguard_recommend_allowlistremoved
Least-privilege recommendation from the proxy's recorded calls: the minimal tool allowlist, argument keys used per tool, and the upstream tools never used (remove them first). No LLM call here; apply it in the dashboard. Requires an account key.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 90 / 100

duplicate-repo

provenance90

liveness100

freshness85

hygiene80

+repository +namespace-matches-repo +website +reachable +uptime-100% ~updated-35d-ago -duplicate-repo(7 names)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://agentwares-agentguard.vercel.app/api/mcp` streamable-http	none	yes	100%	260 ms	2026-07-28, 2025-11-25, 2025-06-18, 2025-03-26, 2024-11-05, 2024-10-07	2026-10-19

Tools (7)

`okgate_create_proxy`	Create a hosted okgate proxy in front of an MCP server. Returns the proxy id, the per-customer MCP URL and the proxy key (shown once). Point your agent's MCP client at the URL with `Authorization: Bearer <key>`. Requires an account key.
`okgate_export_audit`read-only	Export a run's hash-chained audit entries (prev_hash, hash, redacted args) with the Merkle root, for disputes and questionnaires. Verify offline with sha256(prev_hash + canonical(entry)). Requires an account key.
`okgate_get_pricing`read-only	Machine-readable pricing for okgate hosted: bands (Starter/Pro/Team) with included tool calls per month, the 80% soft alert and 150% hard stop, features, the free trial allowance, `per_call` — buying tool calls outright at POST /api/v1/calls from a prepaid balance, which is the one purchase here an unattended agent can complete — and `one_time`: reports a person pays for once on Stripe Checkout, such as the $49 EU AI Act Article 50 readiness report. Same data as /pricing.json.
`okgate_get_run`read-only	The incident-shaped report for one run: counts (calls, reads, writes, faked, blocked, spend), the call timeline with decisions, dry-run mutations (what would have changed), ledger entries and the audit-chain verification. Requires an account key.
`okgate_recommend_allowlist`	Least-privilege recommendation from the proxy's recorded calls: the minimal tool allowlist, argument keys used per tool, and the upstream tools never used (remove them first). No LLM call here; apply it in the dashboard. Requires an account key.
`okgate_set_policy`destructive	Replace a proxy's policy (YAML: mode, upstreams, classify, caps, loop, dry_run, approvals, alerts, chaos, drift). Validated before saving; takes effect within 30 seconds. Requires an account key.
`okgate_spend_report`read-only	Read an agent log and report what it spent: totals, calls by tool and by class, estimated dollars by rail, loops, the largest single run, and — for every overspend — the okgate band whose cap would have stopped it, the exact cap, and the call that would have tripped it. Needs no account and no key. The log is read in the request and discarded; nothing is stored. Accepts an agentwares audit export (`agentwares.audit/v1`), a Claude Code session `.jsonl`, or a CSV/JSONL of tool calls with any of `tool`, `ts`, `class`, `amount_usd`, `rail`, `run_id`, `model`, `input_tokens`, `output_tokens`. Caps come from the proxy's own default policy, so a band named here refuses exactly what it says it refuses. Buying that band is a checkout a person completes; the calls-only purchase an unattended agent can complete is in `okgate_get_pricing` instead.

Schemas: list_tools.

Also listed as

6 other active names share this repository: io.github.agentwares/agent-access-index, io.github.agentwares/agentcheck, io.github.agentwares/deal-memo, io.github.agentwares/mcp-liveness, io.github.agentwares/readiness-scorer, io.github.agentwares/stablecoin-attestations

Similar MCP servers

More from io.github.agentwares

And 2 more from this publisher.

Official server.json

{
  "name": "io.github.agentwares/agentguard-cloud",
  "title": "agentguard — policy proxy for agent tool calls",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://agentwares-agentguard.vercel.app/api/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "description": "Bearer <account key>. POST /api/v1/signup {\"accept_terms\": true} for one — no human, no card. agentguard_spend_report and agentguard_get_pricing work without it."
        }
      ]
    }
  ],
  "version": "0.2.0",
  "repository": {
    "url": "https://github.com/agentwares/servers",
    "source": "github",
    "subfolder": "agentguard-cloud"
  },
  "websiteUrl": "https://agentwares-agentguard.vercel.app",
  "description": "Free spend report from an agent log, no key. Hosted proxies: caps, audit export, buy calls."
}