PromptGuard
Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
@promptguard/mcp-serverclaude mcp add promptguard -e 'PROMPTGUARD_API_KEY=<your promptguard_api_key>' -- npx -y @promptguard/mcp-server@1.1.2
{
"mcpServers": {
"promptguard": {
"command": "npx",
"args": [
"-y",
"@promptguard/mcp-server@1.1.2"
],
"env": {
"PROMPTGUARD_API_KEY": "<your promptguard_api_key>"
}
}
}
}
Environment variables
PROMPTGUARD_API_KEYsecret PromptGuard API key (starts with pg_live_)
docker.io/abhijoysarkar/promptguard-mcp-server:1.1.2claude mcp add promptguard -e 'PROMPTGUARD_API_KEY=<your promptguard_api_key>' -- docker run -i --rm docker.io/abhijoysarkar/promptguard-mcp-server:1.1.2
{
"mcpServers": {
"promptguard": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/abhijoysarkar/promptguard-mcp-server:1.1.2"
],
"env": {
"PROMPTGUARD_API_KEY": "<your promptguard_api_key>"
}
}
}
}
Environment variables
PROMPTGUARD_API_KEYsecret PromptGuard API key (starts with pg_live_)
Frequently asked questions
What is PromptGuard?
Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client
How do I install PromptGuard?
It runs on your machine. In Claude Code: claude mcp add promptguard -e 'PROMPTGUARD_API_KEY=<your promptguard_api_key>' -- npx -y @promptguard/mcp-server@1.1.2. For other clients, paste the JSON configuration from this page into their MCP settings.
Does PromptGuard need an API key?
Yes. It expects PROMPTGUARD_API_KEY, which you set in its configuration.
Is PromptGuard open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains PromptGuard?
It is published by acebot712. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.