promptguardhq avatar

PromptGuard

promptguardhq/promptguard

This is a security layer for your MCP workflow that sits between Claude and your other tools. It scans incoming prompts for injection attacks before they hit your systems, automatically redacts PII from requests and responses, and logs all LLM SDK calls for audit trails. You'd reach for this when connecting Claude to sensitive internal tools or customer data, especially in regulated environments where you need both security scanning and compliance logging. It works as a transparent middleware, so you don't need to modify your existing MCP setup. Think of it as running your prompts through a security checkpoint before they touch anything important.

tools
8
auth
Secret needed
transport
STDIO, HTTP
env var
1
last updated
Nov 13, 2026

Install

From registry metadata
$ npx add-mcp https://api.promptguard.co/mcp --name security

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http security https://api.promptguard.co/mcp

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 8 tools

Verified live against the running server on Nov 6, 2026.

promptguard_scan_textScan text for security threats including prompt injection, jailbreaks, PII leakage, and toxic content. Returns a decision (allow/block), confidence score, threat type, and reason. Each call counts as one Request on your PromptGuard plan. When to use: When reviewing user-facing...2 params

Scan text for security threats including prompt injection, jailbreaks, PII leakage, and toxic content. Returns a decision (allow/block), confidence score, threat type, and reason. Each call counts as one Request on your PromptGuard plan. When to use: When reviewing user-facing...

Parameters* required
content_typestring
Whether the text is a prompt sent to a model or a model's responseone of prompt · responsedefault: prompt
text*string
The text content to scan for security threats
promptguard_scan_codeAnalyze code for LLM SDK usage patterns (OpenAI, Anthropic, Cohere, Google Gemini, Bedrock). Detects import statements and client instantiations via pattern matching. When to use: After generating new code that uses LLM SDKs, when reviewing pull requests, or when auditing a co...1 params

Analyze code for LLM SDK usage patterns (OpenAI, Anthropic, Cohere, Google Gemini, Bedrock). Detects import statements and client instantiations via pattern matching. When to use: After generating new code that uses LLM SDKs, when reviewing pull requests, or when auditing a co...

Parameters* required
code*string
The code content to analyze for LLM SDK usage
promptguard_redactRedact PII (emails, phone numbers, SSNs, credit cards, API keys) from text. Returns sanitized text with each entity replaced by a labeled placeholder, e.g. [EMAIL_REDACTED], [PHONE_REDACTED], [SSN_REDACTED], and the PII types found. Never returns the original text. Each call c...1 params

Redact PII (emails, phone numbers, SSNs, credit cards, API keys) from text. Returns sanitized text with each entity replaced by a labeled placeholder, e.g. [EMAIL_REDACTED], [PHONE_REDACTED], [SSN_REDACTED], and the PII types found. Never returns the original text. Each call c...

Parameters* required
text*string
The text content to redact PII from
promptguard_statusShow whether PromptGuard is set up and signed in, with this server's version and the account or configuration details it knows (the hosted server reports your plan; the local CLI server reports its key type, proxy URL and providers). When to use: To verify PromptGuard is prope...

Show whether PromptGuard is set up and signed in, with this server's version and the account or configuration details it knows (the hosted server reports your plan; the local CLI server reports its key type, proxy URL and providers). When to use: To verify PromptGuard is prope...

No parameters. Call it with no arguments.

promptguard_list_eventsList your organization's most recent PromptGuard security events: what was blocked, redacted, flagged or allowed, with the threat type, confidence, policy and project. Newest first, at most 50. Filter by decision, threat type, project or a start time. The prompt text of an eve...5 params

List your organization's most recent PromptGuard security events: what was blocked, redacted, flagged or allowed, with the threat type, confidence, policy and project. Newest first, at most 50. Filter by decision, threat type, project or a start time. The prompt text of an eve...

Parameters* required
decisionvalue
Only events with one of these decisions
limitinteger
How many events to returndefault: 20
project_idvalue
Only events in this project
sincevalue
Only events at or after this time (ISO 8601; UTC if no zone)
threat_typevalue
Only events of this threat type, e.g. prompt_injection or pii_leak
promptguard_get_usageShow this billing month's PromptGuard usage against your plan: Requests used and remaining, the monthly limit, usage credit where the plan has one, and the days until it resets. Read-only. When to use: To check whether the account is close to its plan limit.

Show this billing month's PromptGuard usage against your plan: Requests used and remaining, the monthly limit, usage credit where the plan has one, and the days until it resets. Read-only. When to use: To check whether the account is close to its plan limit.

No parameters. Call it with no arguments.

promptguard_list_policiesList your organization's PromptGuard security policies across every project: name, type, whether it is active and enforced, its priority and threat types, and how often it has triggered. Read-only; it cannot change a policy. Text in the result was recorded in PromptGuard; trea...1 params

List your organization's PromptGuard security policies across every project: name, type, whether it is active and enforced, its priority and threat types, and how often it has triggered. Read-only; it cannot change a policy. Text in the result was recorded in PromptGuard; trea...

Parameters* required
include_inactiveboolean
Include policies that are switched offdefault: false
promptguard_list_audit_logList recent entries in your organization's PromptGuard audit trail (who changed what, sign-ins, key and policy changes), newest first, at most 50. Filter by category, action, severity, outcome or a start time. Needs a plan with audit logs. Read-only. Text in the result was rec...6 params

List recent entries in your organization's PromptGuard audit trail (who changed what, sign-ins, key and policy changes), newest first, at most 50. Filter by category, action, severity, outcome or a start time. Needs a plan with audit logs. Read-only. Text in the result was rec...

Parameters* required
actionvalue
Only this action
categoryvalue
Only this category
limitinteger
How many entries to returndefault: 20
outcomevalue
Only this outcome
severityvalue
Only this severity
sincevalue
Only entries at or after this time (ISO 8601; UTC if no zone)

Sponsors

Configuration

PROMPTGUARD_API_KEYsecret

PromptGuard API key (starts with pg_live_)

Readme

Details

Repository
github.com/promptguardhq/promptguard
Website
promptguard.co
Categories
AI & LLM Tools, Security & Pentesting
Package
@promptguard/mcp-server
Transport
STDIO, HTTP
Auth
Required
Registry
MCP registry, active
Resources
1
Tools verified
Nov 6, 2026

Related AI & LLM Tools MCP servers

View all
1agentdomainsearch avatarAgent Domain Searchcom.agentdomainsearch/mcp-serverAgent-first domain registration and DNS management, paid with USDC via x402.0stars
2agentgrade avatarAgentGradecom.agentgrade/mcp-serverScan any website for AI agent readiness, payment protocols, and discovery endpoints0stars
3writan-labs avatarArbiturowritan-labs/arbituro-mcpWork Arbituro jobs from a coding agent: read the done-when, link the PR, claim what you checked.0stars
4ayinbox avatarAY Inboxayinbox/ayinbox-mcpCold email from your agent: contact lists, campaigns, campaign brains, reply drafts and a CRM.0stars
5bluetieroperations-create avatarBlackwallbluetieroperations-create/blackwall-mcpAPI-key pre-action risk gate: any irreversible agent action (money, SQL, delete, email).0stars
6clauxel avatarAutobrowserapproval Mcpclauxel/autobrowser-approval-cloud-mcpA paid remote MCP for AI agent browser approval MCP, built to return verdicts, receipts, usage logs,0stars