Guard-CoreMCP server for the Guard ecosystem — config validation, docs search and live threat detection for
Security analysis for Python codebases through the guard-core engine: SecurityConfig validation that catches keys pydantic silently drops, docs search over the vendored corpus, live detection probing, and verified setup guidance for Python, Typescript, Rust, PHP and Go adapters.
·
Model Context Protocol server for the Guard ecosystem: config validation, docs search, and corpus tooling for agents and developers.
Website · Docs · Playground · Dashboard · Discord
Ecosystem
Guard Core is the Python engine. Framework adapters are thin wrappers that translate native request/response types into Guard Core's protocols. The telemetry agents ship security events and metrics to the monitoring backend. Parallel engine implementations exist for Go, PHP, TypeScript (on npm), and Rust (on crates.io) - all ports of the same reference semantics, conformance-tested against the shared adversarial corpus.
Python
| Package | Role | PyPI |
|---|---|---|
| guard-core | Framework-agnostic security engine | |
| guard-agent | Telemetry agent | |
| fastapi-guard | FastAPI / Starlette adapter | |
| flaskapi-guard | Flask adapter | |
| djapi-guard | Django adapter | |
| tornadoapi-guard | Tornado adapter |
Go
Go modules published via GitHub releases. Production-ready.
| Package | Role | Release |
|---|---|---|
| guard-core-go | Go engine | |
| nethttp-guard | net/http adapter | |
| gin-guard | Gin adapter | |
| echo-guard | Echo (v4) adapter | |
| fiber-guard | Fiber (v3) adapter | |
| guard-agent-go | Telemetry agent |
PHP
Published on Packagist under the rennf93 vendor. Production-ready.
| Package | Role | Packagist |
|---|---|---|
| guard-core-php | PHP engine | |
| laravel-guard | Laravel adapter | |
| symfony-guard | Symfony adapter | |
| psr15-guard | PSR-15 adapter | |
| slim-guard | Slim 4 adapter | |
| guard-agent-php | Telemetry agent |
TypeScript / JavaScript
Published under the @guardcore npm scope; source in the guard-core-ts monorepo. Production-ready.
| Package | Role | npm |
|---|---|---|
| @guardcore/core | Core engine | |
| @guardcore/express | Express adapter | |
| @guardcore/nestjs | NestJS adapter | |
| @guardcore/fastify | Fastify adapter | |
| @guardcore/hono | Hono (edge) adapter | |
| guardagent | Telemetry agent |
Rust
Published on crates.io. Production-ready.
| Package | Role | crates.io |
|---|---|---|
| guard-core-engine | Core engine crate | |
| guard-core-rs | Facade crate (consumer entry point) | |
| actix-guard-rs | Actix Web adapter | |
| axum-guard-rs | Axum adapter | |
| tower-guard-rs | Tower adapter | |
| rocket-guard-rs | Rocket adapter | |
| guard-agent-rs | Telemetry agent |
AI Coding Agents
| Package | Role | PyPI |
|---|---|---|
| guard-core-mcp | MCP server: config validation, docs search, detection sandbox |
Documentation
📚 Documentation - full technical documentation for this package.
🛡️ Guard Core - the engine's reference documentation.
🤖 Monitoring Agent Integration - monitor your Guard instance with a monitoring agent.
Why
Your agent can already read the docs. What it cannot do is tell you that the redis_failopen in your config is silently doing nothing because the real field is redis_fail_open, or that the flag you are reaching for did not exist until guard-core 3.5.0, or whether a given request would actually be blocked and by which pattern.
This server answers those from the installed package: real pydantic validation, real field metadata, and the real detection engine. It also answers the cross-language questions the libraries cannot answer: which package guards a Gin, Fastify, Laravel or Rocket app, whether it is tagged or still path-dependent, how to wire its telemetry agent, and what response codes the SaaS ingest endpoint returns.
Install
Install it into your project's environment, not as an isolated tool:
uv add --dev guard-core-mcp
claude mcp add guard-core -- uv run guard-core-mcpuvx guard-core-mcp will start, but an isolated environment contains no guard-core or fastapi-guard for it to introspect, so it can only answer from bundled documentation. Running it inside your own environment is what makes the answers match the versions you actually ship.
Tools
| Tool | Answers |
|---|---|
versions | Which Guard libraries are installed here, and at what version |
validate_config | Is this config valid, including typo'd keys pydantic silently ignores |
config_fields | What is this setting, what does it default to, does a setting for X exist |
search_docs | Where do the docs cover this |
get_doc | The full text of one documentation page |
check_payload | Would this request be blocked, and by which pattern |
ecosystem | The full registry matrix: 5 languages, engines, adapters, agents, conformance, SaaS contract |
adapter_setup | Install plus a verified minimal integration for one adapter (e.g. go + gin) |
wire_agent | How to set up the telemetry agent for a language, including the ingestion contract |
The ecosystem tools are pure data, so they work everywhere, with or without the Python libraries installed. Every quick-start snippet is copied verbatim from the sibling repo READMEs, and release_status tells you honestly whether a package is published, tagged, or still untagged (source, main, or path dependency only).
ChatGPT plugin
The same tools are also served remotely at https://mcp.guard-core.com/mcp and packaged as a ChatGPT plugin: sign in with a guard-core account, and ChatGPT can validate configs, search the docs and run payloads through the hosted detection engine (the latest published releases, not your local versions). The packaging lives in plugin/, the hosted server in guard_core_mcp.hosting, and the full story (env vars, Docker image, developer-mode test loop, submission checklist) in the ChatGPT plugin guide.
Licence
MIT
mcp-name: io.github.Guard-Core/guard-core-mcp
Install with your agent
Paste this prompt into your agent. It reads this page and does the setup for you.
Read https://aiagentslisting.com/mcp/guard-core-mcp to learn what the "Guard Core Mcp" MCP server does and how to install it. Add it to my coding agent's MCP configuration as documented on that page, then confirm the server connects and list the tools it exposes.Agents can also browse this directory over MCP at https://aiagentslisting.com/api/mcp
From the project README
claude mcp add guard-core -- uv run guard-core-mcpThis server doesn't publish a machine-readable tool manifest, and it doesn't expose a public endpoint we could ask. Connect the server locally to see what it exposes.
What's missing
- Exposes toolsRequiredThe server reports at least one tool, from its manifest or a live read.0/15
- Verified liveWe connected to the server and it answered a real MCP handshake.0/20
- Easy installA paste-ready client config (an mcpServers block) is documented.0/12
- Ships promptsThe server exposes at least one prompt template.0/8
- Ships resourcesThe server exposes at least one resource.0/8
All 9 checks (4 passed)
- Installation methodRequiredThe README documents at least one way to install or connect.15/15
- Exposes toolsRequiredThe server reports at least one tool, from its manifest or a live read.0/15
- Has a READMERequiredThe repository ships documentation we could read.10/10
- Verified liveWe connected to the server and it answered a real MCP handshake.0/20
- Easy installA paste-ready client config (an mcpServers block) is documented.0/12
- Has a licenseThe repository declares a license.8/8
- Ships promptsThe server exposes at least one prompt template.0/8
- Ships resourcesThe server exposes at least one resource.0/8
- Claimed by ownerThe maintainer proved ownership of this listing.4/4
Show this grade in your README
Paste this line near the top of your repository's README. The badge always renders the current score.
[](https://aiagentslisting.com/mcp/guard-core-mcp)Alternatives to Guard Core Mcp
View all in Developer Tools
A suite of specialized MCP servers that help you get the most out of AWS, wherever you use MCP.
One MCP endpoint for a whole toolchain - All the forges, the Cloud, research...and everything else
Your AI agent rings your iPhone, asks its question aloud and gets your spoken answer back as text.
v1.7.0Release notesv1.6.0Release notesv1.5.0Release notesv1.4.5Release notesv1.4.4Release notes1.4.3v1.4.3Release notesv1.4.2Release notesv1.4.1Release notesv1.4.0Release notesv1.3.0Release notesv1.2.0guard-core-mcp 1.2.0Release notesv1.1.1Release notes1.0.2v1.0.2Release notes1.0.1v1.0.1Release notes1.0.0v1.0.0Release notes0.1.12v0.1.12Release notes0.1.11v0.1.11Release notes0.1.10v0.1.10Release notes0.1.9v0.1.9Release notes0.1.8v0.1.8Release notes
Send this prompt to your agent to leave a review
Connect to the AI Agents Listing MCP server at https://aiagentslisting.com/api/mcp using the HTTP transport and complete the sign-in when it asks. Then call the submit_review tool for the listing "guard-core-mcp" with a rating from 1 to 5 and a short note on what worked and what did not.- RFRenzo Franceschini
Related MCP Servers
A suite of specialized MCP servers that help you get the most out of AWS, wherever you use MCP.
Databases
One MCP endpoint for a whole toolchain - All the forges, the Cloud, research...and everything else
AI & ML Services
Your AI agent rings your iPhone, asks its question aloud and gets your spoken answer back as text.
Communication
Subscribe to our newsletter
One email a week. New agents, MCP servers and skills, and what is actually getting traction.
