Aguara MCP
Security scanner that runs inside the MCP protocol to check agent content before execution. Exposes four tools: scan_content for analyzing skills, READMEs, and tool definitions against 219 detection rules covering prompt injection, credential leaks, and exfiltration patterns; check_mcp_config for vetting server configurations from Claude Desktop or Cursor before you add them; list_rules and explain_rule for browsing the detection catalog. All scanning happens locally with no LLM calls or network access. The scanner imports Aguara as a Go library and runs in-process, returning structured verdicts with severity ratings and remediation guidance. Sensitive matches get redacted in responses. Useful when your agent is installing third-party MCP servers or evaluating untrusted tool descriptions and you want a security review before the agent acts on them.
- GitHub stars
- 4
- tools
- 5
- transport
- STDIO
- last updated
- Feb 26, 2026
Tools
5 toolsPublic tool metadata for what this MCP can expose to an agent.
scan_contentScan text for security threats before acting on it.
Scan text for security threats before acting on it.
No parameter schema in public metadata yet.
check_mcp_configCheck an MCP server configuration (JSON) for security issues before adding it to a client.
Check an MCP server configuration (JSON) for security issues before adding it to a client.
No parameter schema in public metadata yet.
list_rulesBrowse the embedded engine's catalog of detections, useful when the agent needs to understand a finding or filter by category.
Browse the embedded engine's catalog of detections, useful when the agent needs to understand a finding or filter by category.
No parameter schema in public metadata yet.
explain_ruleGet detailed information about a specific rule by ID.
Get detailed information about a specific rule by ID.
No parameter schema in public metadata yet.
discover_mcpDiscover MCP server configurations on the local machine by reading known MCP client config files.
Discover MCP server configurations on the local machine by reading known MCP client config files.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Aguara MCP
Local security checks for AI agents before they trust third-party tools.
Aguara MCP gives Claude Code, Cursor, Windsurf, and any MCP-compatible agent a local tool for reviewing untrusted agent content before acting on it.
When an agent is about to install an MCP server, inspect a skill, read a plugin README, or load a tool configuration, it can call Aguara first. The scan runs locally, inside the MCP server, and returns a structured verdict with findings, severity, remediation, and the rule that triggered.
No LLM calls. No network access. No subprocess to the aguara binary. The MCP server imports Aguara as a Go library and runs the scanner in-process.
Use it to help agents answer questions like:
- Is this MCP config exposing credentials?
- Does this tool description contain prompt injection?
- Is this README asking the agent to run unsafe install commands?
- Does this skill try to read secrets or exfiltrate data?
- Which rule triggered, and why?
Details
- Repository
- github.com/garagon/aguara-mcp
- Categories
- AI & LLM Tools, Security & Pentesting
- Package
https://github.com/garagon/aguara-mcp/releases/download/v0.2.0/aguara-mcp.mcpb- Transport
- STDIO
- Registry
- MCP registry, active
Related AI & LLM Tools MCP servers
View all
EchoVault Memorygo-ports/echovaultLocal-first memory for coding agents; stores decisions, bugs, and context across sessions.4stars
Wso2 Docs Mcp Serveriamvirul/wso2-docs-mcp-serverSemantic search over WSO2 docs (APIM, IS, MI, Choreo, Ballerina) via RAG and pgvector.4stars
Memographindhar01/memographGraph-based memory system for LLMs with knowledge graphs and semantic search.4stars
CoinRithm Agent Tradingcoinrithm/coinrithm-agent-tradingKeyless prediction-market data across 12 venues plus paper-trading of crypto spot, futures, and PM.4stars
Nervous Systemlevelsofself/mcp-nervous-systemGovernance for LLM agents: 7 enforced rules + read-only reference tools. Safe in any MCP client.4stars
Mif Toolsvarun29ankus/mif-specConvert, validate, and inspect AI agent memories across formats0stars