Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "guardlayer": {
      "type": "http",
      "url": "https://www.guardlayer.io/api/mcp"
    }
  }
}

claude mcp add --transport http guardlayer https://www.guardlayer.io/api/mcp

[mcp_servers.guardlayer]
url = "https://www.guardlayer.io/api/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "guardlayer": {
      "type": "remote",
      "url": "https://www.guardlayer.io/api/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "guardlayer": {
      "type": "http",
      "url": "https://www.guardlayer.io/api/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=guardlayer&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vd3d3Lmd1YXJkbGF5ZXIuaW8vYXBpL21jcCJ9"
}

{
  "servers": {
    "guardlayer": {
      "type": "http",
      "url": "https://www.guardlayer.io/api/mcp"
    }
  }
}

{
  "mcpServers": {
    "guardlayer": {
      "httpUrl": "https://www.guardlayer.io/api/mcp"
    }
  }
}

extensions:
  "guardlayer":
    enabled: true
    name: "guardlayer"
    type: streamable_http
    uri: "https://www.guardlayer.io/api/mcp"
    timeout: 300

Quality 82 / 100new

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene88 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations3 of 3 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: scan_files (destructiveHint, idempotentHint); get_supabase_snapshot_sql (destructiveHint, idempotentHint); check_supabase_snapshot (destructiveHint, idempotentHint)
pass
tools.token_costabout 742 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump
pass
tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pull, stability.new_linkstool history recorded for 3 of the 7 days needed

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

3 tools, about 742 tokens to load them all · tool set ac1729826be1 · checked 2026-11-14 07:36 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 97 / 100

provenance90

liveness100

freshness100

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-3d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://www.guardlayer.io/api/mcp` streamable-http	none	yes	100%	512 ms	2025-06-18	2026-11-14

Tools (3)

`check_supabase_snapshot`read-only	Checks the JSON from get_supabase_snapshot_sql: tables anyone can read, RLS off, policies that only check for a signed-in user (public in practice when sign-ups are open), users who can update their own role or plan columns, exposed SECURITY DEFINER functions, public buckets. Pass auth_config (the project's Auth settings) when you can: it decides whether 'any signed-in user' means anyone. Pass previous_issue_keys from an earlier result to see what is closed, still open or new. Returns each issue with its SQL fix and a fix prompt.
`get_supabase_snapshot_sql`read-only	Returns the read-only SQL for the live Supabase check and how to run it. It reads only catalog metadata (table and column names, RLS flags, policies, grants, triggers, SECURITY DEFINER functions, bucket settings), never table rows, and returns one JSON value.
`scan_files`read-only	Static security scan of a Next.js + Supabase codebase: secrets in code or public env vars (NEXT_PUBLIC_, VITE_), service role keys in client code, RLS off or open policies in supabase/migrations, unauthenticated API routes, Server Actions and Edge Functions, unsafe redirects and more. Send source files (ts, tsx, js, jsx, sql, .env*, config files) with paths relative to the project root; skip node_modules, build output and lockfiles. Up to 300 files and 4 MB per call; split bigger projects. Files are scanned in memory and discarded.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.solvionholdings/guardlayer",
  "icons": [
    {
      "src": "https://www.guardlayer.io/icon.svg",
      "sizes": [
        "any"
      ],
      "mimeType": "image/svg+xml"
    },
    {
      "src": "https://www.guardlayer.io/apple-icon.png",
      "sizes": [
        "180x180"
      ],
      "mimeType": "image/png"
    }
  ],
  "title": "GuardLayer",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://www.guardlayer.io/api/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.1",
  "repository": {
    "url": "https://github.com/solvionholdings/guardlayer-plugin",
    "source": "github"
  },
  "websiteUrl": "https://www.guardlayer.io/mcp",
  "description": "Security checks for Next.js + Supabase apps: code scan, read-only live DB check, fix confirmation."
}