Guard Core

السجل الرسمي البحث والويب

Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

PYPI package guard-core-mcp
Claude Code
claude mcp add guard-core -- uvx guard-core-mcp==1.7.0
إعداد JSON (Claude Desktop وCursor وVS Code)
{
    "mcpServers": {
        "guard-core": {
            "command": "uvx",
            "args": [
                "guard-core-mcp==1.7.0"
            ]
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. Ecosystem
  2. Documentation
  3. Why
  4. Install
  5. Tools
  6. ChatGPT plugin
  7. Licence

Model Context Protocol server for the Guard ecosystem: config validation, docs search, and corpus tooling for agents and developers.

Website · Docs · Playground · Dashboard · Discord


Ecosystem

Guard Core is the Python engine. Framework adapters are thin wrappers that translate native request/response types into Guard Core's protocols. The telemetry agents ship security events and metrics to the monitoring backend. Parallel engine implementations exist for Go, PHP, TypeScript (on npm), and Rust (on crates.io) - all ports of the same reference semantics, conformance-tested against the shared adversarial corpus.

Python
PackageRolePyPI
guard-coreFramework-agnostic security engine
guard-agentTelemetry agent
fastapi-guardFastAPI / Starlette adapter
flaskapi-guardFlask adapter
djapi-guardDjango adapter
tornadoapi-guardTornado adapter
Go

Go modules published via GitHub releases. Production-ready.

PackageRoleRelease
guard-core-goGo engine
nethttp-guardnet/http adapter
gin-guardGin adapter
echo-guardEcho (v4) adapter
fiber-guardFiber (v3) adapter
guard-agent-goTelemetry agent
PHP

Published on Packagist under the rennf93 vendor. Production-ready.

PackageRolePackagist
guard-core-phpPHP engine
laravel-guardLaravel adapter
symfony-guardSymfony adapter
psr15-guardPSR-15 adapter
slim-guardSlim 4 adapter
guard-agent-phpTelemetry agent
TypeScript / JavaScript

Published under the @guardcore npm scope; source in the guard-core-ts monorepo. Production-ready.

PackageRolenpm
@guardcore/coreCore engine
@guardcore/expressExpress adapter
@guardcore/nestjsNestJS adapter
@guardcore/fastifyFastify adapter
@guardcore/honoHono (edge) adapter
guardagentTelemetry agent
Rust

Published on crates.io. Production-ready.

PackageRolecrates.io
guard-core-engineCore engine crate
guard-core-rsFacade crate (consumer entry point)
actix-guard-rsActix Web adapter
axum-guard-rsAxum adapter
tower-guard-rsTower adapter
rocket-guard-rsRocket adapter
guard-agent-rsTelemetry agent
AI Coding Agents
PackageRolePyPI
guard-core-mcpMCP server: config validation, docs search, detection sandbox

Documentation

📚 Documentation - full technical documentation for this package.

🛡️ Guard Core - the engine's reference documentation.

🤖 Monitoring Agent Integration - monitor your Guard instance with a monitoring agent.


Why

Your agent can already read the docs. What it cannot do is tell you that the redis_failopen in your config is silently doing nothing because the real field is redis_fail_open, or that the flag you are reaching for did not exist until guard-core 3.5.0, or whether a given request would actually be blocked and by which pattern.

This server answers those from the installed package: real pydantic validation, real field metadata, and the real detection engine. It also answers the cross-language questions the libraries cannot answer: which package guards a Gin, Fastify, Laravel or Rocket app, whether it is tagged or still path-dependent, how to wire its telemetry agent, and what response codes the SaaS ingest endpoint returns.

Install

Install it into your project's environment, not as an isolated tool:

uv add --dev guard-core-mcp
claude mcp add guard-core -- uv run guard-core-mcp

uvx guard-core-mcp will start, but an isolated environment contains no guard-core or fastapi-guard for it to introspect, so it can only answer from bundled documentation. Running it inside your own environment is what makes the answers match the versions you actually ship.

Tools

ToolAnswers
versionsWhich Guard libraries are installed here, and at what version
validate_configIs this config valid, including typo'd keys pydantic silently ignores
config_fieldsWhat is this setting, what does it default to, does a setting for X exist
search_docsWhere do the docs cover this
get_docThe full text of one documentation page
check_payloadWould this request be blocked, and by which pattern
ecosystemThe full registry matrix: 5 languages, engines, adapters, agents, conformance, SaaS contract
adapter_setupInstall plus a verified minimal integration for one adapter (e.g. go + gin)
wire_agentHow to set up the telemetry agent for a language, including the ingestion contract

The ecosystem tools are pure data, so they work everywhere, with or without the Python libraries installed. Every quick-start snippet is copied verbatim from the sibling repo READMEs, and release_status tells you honestly whether a package is published, tagged, or still untagged (source, main, or path dependency only).

ChatGPT plugin

The same tools are also served remotely at https://mcp.guard-core.com/mcp and packaged as a ChatGPT plugin: sign in with a guard-core account, and ChatGPT can validate configs, search the docs and run payloads through the hosted detection engine (the latest published releases, not your local versions). The packaging lives in plugin/, the hosted server in guard_core_mcp.hosting, and the full story (env vars, Docker image, developer-mode test loop, submission checklist) in the ChatGPT plugin guide.

Licence

MIT

mcp-name: io.github.Guard-Core/guard-core-mcp

الأسئلة الشائعة

ما هو Guard Core؟

Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.

كيف أثبّت Guard Core؟

يعمل على جهازك. في Claude Code: claude mcp add guard-core -- uvx guard-core-mcp==1.7.0. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج Guard Core إلى مفتاح API؟

لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.

هل Guard Core مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون Guard Core؟

ينشره Guard-Core. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.