agentguard MCP server

Name: agentguard MCP server
Author: agentwares-agentguard.vercel.app

MCP serverMCP

Put spend caps, human approval and a kill switch between an AI agent and its MCP servers.

Listed on its own since 2026-09-23. Until then it was part of agentcheck, where its earlier checks remain.

by agentwares-agentguard.vercel.apprepository ↗homepage ↗v0.2.0

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability273/279 checks ok

when	check	result	http	latency	detail
37 min ago	mcp initialize	ok	200	315 ms	server okgate 0.2.0 · protocol 2025-06-18 · 7 tools
2 h ago	mcp initialize	ok	200	421 ms	server okgate 0.2.0 · protocol 2025-06-18 · 7 tools
3 h ago	mcp initialize	ok	200	153 ms	server okgate 0.2.0 · protocol 2025-06-18 · 7 tools
4 h ago	mcp initialize	ok	200	274 ms	server okgate 0.2.0 · protocol 2025-06-18 · 7 tools
5 h ago	mcp initialize	ok	200	132 ms	server okgate 0.2.0 · protocol 2025-06-18 · 7 tools
6 h ago	mcp initialize	ok	200	167 ms	server okgate 0.2.0 · protocol 2025-06-18 · 7 tools
7 h ago	mcp initialize	ok	200	126 ms	server okgate 0.2.0 · protocol 2025-06-18 · 7 tools
8 h ago	mcp initialize	ok	200	153 ms	server okgate 0.2.0 · protocol 2025-06-18 · 7 tools
9 h ago	mcp initialize	ok	200	159 ms	server okgate 0.2.0 · protocol 2025-06-18 · 7 tools
10 h ago	mcp initialize	ok	200	131 ms	server okgate 0.2.0 · protocol 2025-06-18 · 7 tools

Tools observed via MCP handshake

okgate_get_pricing — Machine-readable pricing for okgate hosted: bands (Starter/Pro/Team) with included tool calls per month, the 80% soft alert and 150% hard stop, features, the fr
okgate_spend_report — Read an agent log and report what it spent: totals, calls by tool and by class, estimated dollars by rail, loops, the largest single run, and — for every oversp
okgate_create_proxy — Create a hosted okgate proxy in front of an MCP server. Returns the proxy id, the per-customer MCP URL and the proxy key (shown once). Point your agent's MCP cl
okgate_set_policy — Replace a proxy's policy (YAML: mode, upstreams, classify, caps, loop, dry_run, approvals, alerts, chaos, drift). Validated before saving; takes effect within 3
okgate_get_run — The incident-shaped report for one run: counts (calls, reads, writes, faked, blocked, spend), the call timeline with decisions, dry-run mutations (what would ha
okgate_export_audit — Export a run's hash-chained audit entries (prev_hash, hash, redacted args) with the Merkle root, for disputes and questionnaires. Verify offline with sha256(pre
okgate_recommend_allowlist — Least-privilege recommendation from the proxy's recorded calls: the minimal tool allowlist, argument keys used per tool, and the upstream tools never used (remo

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

agentguard is a policy proxy for agents that hold real credentials. It sits between the agent and its MCP servers and enforces caps per run and per day on writes, deletes, emails and dollars; sends destructive tools to a person for approval; breaks loops of identical calls; dry-runs writes so you can see what a run would have changed; and stops everything with a kill switch. Every call is written to a hash-chained audit log. The open-source proxy is MIT and self-hosted with npx @agentwares/agentguard (no account). The hosted proxy adds a dashboard and alerts: free trial of 1,000 tool calls a month with no card, Starter $29 a month for 100,000 calls.

securitypermissionsguardrailsspend-limitsbudgetkill-switchhuman-approvalaudit-logdry-runmcp-proxysafetypolicymcpaudit

kind Verified owner

name Verified owner

repoUrl Official MCP Registry

summary Verified owner

version Official MCP Registry

description Verified owner

homepageUrl Official MCP Registry

publisherUrl ARD catalog (/.well-known/ard.json)

publisherName ARD catalog (/.well-known/ard.json)

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryio.github.agentwares/agentguard-cloud

first seen 1 mo ago · fetched 3 d agoopen ↗

ARD catalog (/.well-known/ard.json)urn:air:agentwares-agentguard.vercel.app:mcp:agentguard

first seen 28 d ago · fetched 28 d agoopen ↗

Verified ownerag_49qv8nq77zpn

first seen 3 d ago · fetched 3 d ago

Field history (11 recent events)

3 d ago · declared · summary → "Put spend caps, human approval and a kill switch between an AI agent and its MCP servers."
3 d ago · declared · description → "agentguard is a policy proxy for agents that hold real credentials. It sits between the agent and its MCP servers and e
12 d ago · claimed · ownership → {"method":"well_known_file","target":"agentwares-agentguard.vercel.app"}
17 d ago · declared · publisherUrl → "https://agentwares-agentguard.vercel.app"
17 d ago · declared · homepageUrl → "https://agentwares-agentguard.vercel.app"
17 d ago · declared · summary → "A policy proxy between an agent and its MCP servers: loop breaker, blast-radius caps, dry-run writes, kill switch and a
17 d ago · declared · version → "0.2.0"
17 d ago · declared · protocols → ["mcp"]
17 d ago · declared · repoUrl → "https://github.com/agentwares/servers"
17 d ago · declared · description → "A policy proxy between an agent and its MCP servers: loop breaker, blast-radius caps, dry-run writes, kill switch and a
17 d ago · declared · publisherName → "agentwares-agentguard.vercel.app"

Evidence

What the publisher says

Capabilities

Where this record came from