{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_u6qzfdq8wcc3","handle":"bonanza-mcp-guard","url":"https://wellknown.network/agents/bonanza-mcp-guard","links":{"self":"https://wellknown.network/agents/bonanza-mcp-guard/record.json","html":"https://wellknown.network/agents/bonanza-mcp-guard","markdown":"https://wellknown.network/agents/bonanza-mcp-guard/record.md","api":"https://wellknown.network/api/v1/agents/bonanza-mcp-guard","status":"https://wellknown.network/api/v1/agents/bonanza-mcp-guard/status","claim":"https://wellknown.network/agents/bonanza-mcp-guard/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/bonanza-mcp-guard/claim.json","badge":"https://wellknown.network/agents/bonanza-mcp-guard/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:bonanza-mcp-guard","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"bonanza-mcp-guard","summary":"Production MCP gateway: JWT auth, rate limiting, spending controls, audit log. mcp-guard serve --config mcp-guard.yaml","description":"# mcp-guard\n\n[![CI](https://github.com/c6zks4gssn-droid/mcp-guard/actions/workflows/ci.yml/badge.svg)](https://github.com/c6zks4gssn-droid/mcp-guard/actions/workflows/ci.yml)\n[![PyPI](https://img.shields.io/pypi/v/bonanza-mcp-guard)](https://pypi.org/project/bonanza-mcp-guard/)\n[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](LICENSE)\n[![Python](https://img.shields.io/pypi/pyversions/bonanza-mcp-guard)](https://pypi.org/project/bonanza-mcp-guard/)\n\n**Put auth, rate limits, spend caps, and audit logs in front of any MCP server — without changing the server.**\n\n```bash\npip install \"bonanza-mcp-guard[yaml]\"\nmcp-guard scan\nmcp-guard serve --config mcp-guard.yaml\n```\n\n> **PyPI:** package [`bonanza-mcp-guard`](https://pypi.org/project/bonanza-mcp-guard/) (name `mcp-guard` was taken). CLI is still `mcp-guard`.\n\n![Demo](docs/demo.gif)\n\nSits in front of any MCP server over stdio. Zero required dependencies.\n\nComplements static scanners like [mcp-scan](https://github.com/invariantlabs-ai/mcp-scan) with a **runtime stdio gateway** (auth, limits, audit).\n\n## Why mcp-guard?\n\n| Without mcp-guard | With mcp-guard |\n|---|---|\n| Any agent calls any tool | Agent must authenticate (API key / JWT) |\n| No spend ceiling | Per-session spend caps, per-hour rate limits |\n| No audit trail | Every request logged to JSONL |\n| Server exposed directly | Gateway wraps server — zero code changes |\n\nComplements static scanners like [mcp-scan](https://github.com/invariantlabs-ai/mcp-scan) with a **runtime stdio gateway** (auth, limits, audit).\n\n---\n\n## The problem\n\nSecurity research in 2026 reported **1,800+ internet-exposed MCP endpoints** with **no authentication**. Any MCP client can invoke tools with no identity, no spend ceiling, and no audit trail.\n\n`mcp-guard` adds a gateway layer — Claude Desktop, Cursor, Windsurf, or custom agents talk to `mcp-guard`; it talks to your real MCP server.\n\n---\n\n## 30-second try\n\n```bash\npip install \"bonanza-mcp-guard[yaml]\"\nmcp-guard scan…","publisher":null,"homepage":"https://bonanza-labs.com","repository":"https://github.com/c6zks4gssn-droid/mcp-guard/issues","version":"0.1.4","license":"Apache-2.0","protocols":["mcp"],"tags":["mcp","model-context-protocol","gateway","security","auth","jwt","rate-limit","audit","ai","agents"],"pricing":null,"endpoints":[{"url":"pypi:bonanza-mcp-guard","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"derived"},{"slug":"security.identity","name":"Identity & Access","confidence":1,"provenance":"declared"}],"categories":["dev","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"bonanza-mcp-guard","registry":"pypi","observedAt":"2026-09-09T10:31:59.456Z","publishedAt":"2026-06-25T17:11:59.035940Z","latestVersion":"0.1.4"}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"bonanza-mcp-guard","url":"https://pypi.org/project/bonanza-mcp-guard/","firstSeenAt":"2026-09-09T10:27:36.669Z","fetchedAt":"2026-09-09T10:27:36.669Z","normalizedAt":"2026-09-09T10:27:36.669Z"}]},"firstSeenAt":"2026-09-09T10:27:36.669Z","updatedAt":"2026-09-09T10:31:59.456Z"}