mcp-guarded-server

An MCP server with a real security model and the tests that prove it: three permission tiers with human approval for destructive tools, a path jail, tool results marked as untrusted data, rate limits, a hash-chained audit log and a 47-check protocol conformance suite. 974 tests, no network.

{
  "mcpServers": {
    "mcp-guarded-server": {
      "command": "uvx",
      "args": [
        "mcp-guarded-server"
      ]
    }
  }
}

claude mcp add mcp-guarded-server uvx mcp-guarded-server

{
  "mcpServers": {
    "mcp-guarded-server": {
      "command": "uvx",
      "args": [
        "mcp-guarded-server"
      ]
    }
  }
}