
PromptGuard
This is a security layer for your MCP workflow that sits between Claude and your other tools. It scans incoming prompts for injection attacks before they hit your systems, automatically redacts PII from requests and responses, and logs all LLM SDK calls for audit trails. You'd reach for this when connecting Claude to sensitive internal tools or customer data, especially in regulated environments where you need both security scanning and compliance logging. It works as a transparent middleware, so you don't need to modify your existing MCP setup. Think of it as running your prompts through a security checkpoint before they touch anything important.
- tools
- 8
- auth
- Secret needed
- transport
- STDIO, HTTP
- env var
- 1
- last updated
- Nov 13, 2026
Install
From registry metadata$ npx add-mcp https://api.promptguard.co/mcp --name securityRun in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.
Review the command, arguments and environment values before installing. MCP servers run with your local permissions.
Other ways
Claude Code
$ claude mcp add --transport http security https://api.promptguard.co/mcpRun in your terminal. Add --scope user to make it available in every project.
Tools
Verified live · 8 toolsVerified live against the running server on Nov 6, 2026.
promptguard_scan_textScan text for security threats including prompt injection, jailbreaks, PII leakage, and toxic content. Returns a decision (allow/block), confidence score, threat type, and reason. Each call counts as one Request on your PromptGuard plan. When to use: When reviewing user-facing...2 params
Scan text for security threats including prompt injection, jailbreaks, PII leakage, and toxic content. Returns a decision (allow/block), confidence score, threat type, and reason. Each call counts as one Request on your PromptGuard plan. When to use: When reviewing user-facing...
content_typestringprompt · responsedefault: prompttext*stringpromptguard_scan_codeAnalyze code for LLM SDK usage patterns (OpenAI, Anthropic, Cohere, Google Gemini, Bedrock). Detects import statements and client instantiations via pattern matching. When to use: After generating new code that uses LLM SDKs, when reviewing pull requests, or when auditing a co...1 params
Analyze code for LLM SDK usage patterns (OpenAI, Anthropic, Cohere, Google Gemini, Bedrock). Detects import statements and client instantiations via pattern matching. When to use: After generating new code that uses LLM SDKs, when reviewing pull requests, or when auditing a co...
code*stringpromptguard_redactRedact PII (emails, phone numbers, SSNs, credit cards, API keys) from text. Returns sanitized text with each entity replaced by a labeled placeholder, e.g. [EMAIL_REDACTED], [PHONE_REDACTED], [SSN_REDACTED], and the PII types found. Never returns the original text. Each call c...1 params
Redact PII (emails, phone numbers, SSNs, credit cards, API keys) from text. Returns sanitized text with each entity replaced by a labeled placeholder, e.g. [EMAIL_REDACTED], [PHONE_REDACTED], [SSN_REDACTED], and the PII types found. Never returns the original text. Each call c...
text*stringpromptguard_statusShow whether PromptGuard is set up and signed in, with this server's version and the account or configuration details it knows (the hosted server reports your plan; the local CLI server reports its key type, proxy URL and providers). When to use: To verify PromptGuard is prope...
Show whether PromptGuard is set up and signed in, with this server's version and the account or configuration details it knows (the hosted server reports your plan; the local CLI server reports its key type, proxy URL and providers). When to use: To verify PromptGuard is prope...
No parameters. Call it with no arguments.
promptguard_list_eventsList your organization's most recent PromptGuard security events: what was blocked, redacted, flagged or allowed, with the threat type, confidence, policy and project. Newest first, at most 50. Filter by decision, threat type, project or a start time. The prompt text of an eve...5 params
List your organization's most recent PromptGuard security events: what was blocked, redacted, flagged or allowed, with the threat type, confidence, policy and project. Newest first, at most 50. Filter by decision, threat type, project or a start time. The prompt text of an eve...
decisionvaluelimitintegerproject_idvaluesincevaluethreat_typevaluepromptguard_get_usageShow this billing month's PromptGuard usage against your plan: Requests used and remaining, the monthly limit, usage credit where the plan has one, and the days until it resets. Read-only. When to use: To check whether the account is close to its plan limit.
Show this billing month's PromptGuard usage against your plan: Requests used and remaining, the monthly limit, usage credit where the plan has one, and the days until it resets. Read-only. When to use: To check whether the account is close to its plan limit.
No parameters. Call it with no arguments.
promptguard_list_policiesList your organization's PromptGuard security policies across every project: name, type, whether it is active and enforced, its priority and threat types, and how often it has triggered. Read-only; it cannot change a policy. Text in the result was recorded in PromptGuard; trea...1 params
List your organization's PromptGuard security policies across every project: name, type, whether it is active and enforced, its priority and threat types, and how often it has triggered. Read-only; it cannot change a policy. Text in the result was recorded in PromptGuard; trea...
include_inactivebooleanpromptguard_list_audit_logList recent entries in your organization's PromptGuard audit trail (who changed what, sign-ins, key and policy changes), newest first, at most 50. Filter by category, action, severity, outcome or a start time. Needs a plan with audit logs. Read-only. Text in the result was rec...6 params
List recent entries in your organization's PromptGuard audit trail (who changed what, sign-ins, key and policy changes), newest first, at most 50. Filter by category, action, severity, outcome or a start time. Needs a plan with audit logs. Read-only. Text in the result was rec...
actionvaluecategoryvaluelimitintegeroutcomevalueseverityvaluesincevalueSponsors
Configuration
PROMPTGUARD_API_KEYsecretPromptGuard API key (starts with pg_live_)
Readme
Details
- Repository
- github.com/promptguardhq/promptguard
- Website
- promptguard.co
- Categories
- AI & LLM Tools, Security & Pentesting
- Package
@promptguard/mcp-server- Transport
- STDIO, HTTP
- Auth
- Required
- Registry
- MCP registry, active
- Resources
- 1
- Tools verified
- Nov 6, 2026