mcp-aguara

garagon/mcp-aguara
★ 3 stars Go 🤖 AI/LLM Updated today
MCP server that gives AI agents a local security scanner before they install or trust third-party tools.
View on GitHub →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcp-aguara": {
      "command": "go",
      "args": [
        "run",
        "github.com/garagon/mcp-aguara@latest"
      ]
    }
  }
}

README Excerpt

Local security checks for AI agents before they trust third-party tools. Aguara MCP gives Claude Code, Cursor, Windsurf, and any MCP-compatible agent a local tool for reviewing untrusted agent content before acting on it. When an agent is about to install an MCP server, inspect a skill, read a plugin README, or load a tool configuration, it can call Aguara first. The scan runs locally, inside the MCP server, and returns a structured verdict with findings, severity, remediation, and the rule that

Tools (10)

categoryconfigcontentdisabled_rulesfilenamemin_severityrule_idscan_contentscan_profiletool_name

Topics

aguaraai-agentsai-securityclaudeclaude-codegolangmcpmcp-servermodel-context-protocolprompt-injectionsecuritystatic-analysis