AgentGuard MCP Server

io.github.MerchantGuard/agentguard

Repository Registry

What is the AgentGuard MCP server?

Local spend caps, kill-switch blocking and Ed25519-signed receipts for AI agent tool calls.

How to install AgentGuard

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

AGENTGUARD_MCP_DAILY_CAP_CENTS
Local daily spend cap in cents. A nonnegative integer.
AGENTGUARD_MCP_PER_CALL_CAP_CENTS
Local per-call spend cap in cents. A nonnegative integer.
AGENTGUARD_MCP_TENANT
Tenant identifier stamped into local receipts.
AGENTGUARD_HOME
Local signing-key, configuration and ledger directory. Defaults to .agentguard in the operating system home directory.
AGENTGUARD_MCP_LEDGER
Local decision storage. ndjson persists receipts across restarts; memory retains this process only.
AGENTGUARD_MCP_DISABLE_COST_OVERRIDE
Set to 1 to discard and prevent model pricing overrides for this server.
AGENTGUARD_LOCK_COST_OVERRIDES
Spend SDK startup lock. Set to 1 to prevent model pricing overrides.
AGENTGUARD_ACTOR_DIGEST
Set to 1 to hash actor identifiers before they enter local receipts.
AGENTGUARD_LICENSE_KEY
secret
Optional AgentGuard license key for license validation and seat registration. Otherwise read from local configuration.
AGENTGUARD_LICENSE_ENDPOINT
License and seat service base URL. No prompts, tool content or receipts are sent.
AGENTGUARD_NO_BEACON
Set to 1 to disable optional activation telemetry regardless of saved consent.
AGENTGUARD_TELEMETRY
Set to 1 to opt in to content-free activation telemetry. Otherwise saved consent applies, default off.
AGENTGUARD_INSTALL_ID
Optional identifier used only by opted-in activation telemetry when no saved install identifier exists.
AGENTGUARD_ANONYMOUS_INSTALL_ID
Legacy fallback for AGENTGUARD_INSTALL_ID in opted-in activation telemetry.
CI
Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
GITHUB_ACTIONS
Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
GITLAB_CI
Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
CIRCLECI
Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
BUILDKITE
Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
VERCEL
Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.
NETLIFY
Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "agentguard": {
      "command": "npx",
      "args": [
        "-y",
        "@agentguard-run/mcp"
      ],
      "env": {
        "AGENTGUARD_MCP_DAILY_CAP_CENTS": "<YOUR_AGENTGUARD_MCP_DAILY_CAP_CENTS>",
        "AGENTGUARD_MCP_PER_CALL_CAP_CENTS": "<YOUR_AGENTGUARD_MCP_PER_CALL_CAP_CENTS>",
        "AGENTGUARD_MCP_TENANT": "<YOUR_AGENTGUARD_MCP_TENANT>",
        "AGENTGUARD_HOME": "<YOUR_AGENTGUARD_HOME>",
        "AGENTGUARD_MCP_LEDGER": "<YOUR_AGENTGUARD_MCP_LEDGER>",
        "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE": "<YOUR_AGENTGUARD_MCP_DISABLE_COST_OVERRIDE>",
        "AGENTGUARD_LOCK_COST_OVERRIDES": "<YOUR_AGENTGUARD_LOCK_COST_OVERRIDES>",
        "AGENTGUARD_ACTOR_DIGEST": "<YOUR_AGENTGUARD_ACTOR_DIGEST>",
        "AGENTGUARD_LICENSE_KEY": "<YOUR_AGENTGUARD_LICENSE_KEY>",
        "AGENTGUARD_LICENSE_ENDPOINT": "<YOUR_AGENTGUARD_LICENSE_ENDPOINT>",
        "AGENTGUARD_NO_BEACON": "<YOUR_AGENTGUARD_NO_BEACON>",
        "AGENTGUARD_TELEMETRY": "<YOUR_AGENTGUARD_TELEMETRY>",
        "AGENTGUARD_INSTALL_ID": "<YOUR_AGENTGUARD_INSTALL_ID>",
        "AGENTGUARD_ANONYMOUS_INSTALL_ID": "<YOUR_AGENTGUARD_ANONYMOUS_INSTALL_ID>",
        "CI": "<YOUR_CI>",
        "GITHUB_ACTIONS": "<YOUR_GITHUB_ACTIONS>",
        "GITLAB_CI": "<YOUR_GITLAB_CI>",
        "CIRCLECI": "<YOUR_CIRCLECI>",
        "BUILDKITE": "<YOUR_BUILDKITE>",
        "VERCEL": "<YOUR_VERCEL>",
        "NETLIFY": "<YOUR_NETLIFY>"
      }
    }
  }
}