SQLGuard — Execution Certificate Firewall
Permission before writes. Gravity→DENYs→Session $0.25. Pilot $100; Gateway $299. Probe free.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http sqlguard-execution-certificate-firewall 'https://sqlguard.io/mcp' --header 'X-SQLGuard-Agent: <Agent or wallet id for Session/Cert settle>'
{
"mcpServers": {
"sqlguard-execution-certificate-firewall": {
"type": "http",
"url": "https://sqlguard.io/mcp",
"headers": {
"X-SQLGuard-Agent": "<Agent or wallet id for Session/Cert settle>"
}
}
}
}
claude mcp add --transport http sqlguard-execution-certificate-firewall 'https://sqlguard-io.fly.dev/mcp' --header 'X-SQLGuard-Agent: <Always-on Fly alias>'
{
"mcpServers": {
"sqlguard-execution-certificate-firewall": {
"type": "http",
"url": "https://sqlguard-io.fly.dev/mcp",
"headers": {
"X-SQLGuard-Agent": "<Always-on Fly alias>"
}
}
}
}
Frequently asked questions
What is SQLGuard — Execution Certificate Firewall?
Permission before writes. Gravity→DENYs→Session $0.25. Pilot $100; Gateway $299. Probe free.
How do I install SQLGuard — Execution Certificate Firewall?
It runs as a remote server. In Claude Code: claude mcp add --transport http sqlguard-execution-certificate-firewall 'https://sqlguard.io/mcp' --header 'X-SQLGuard-Agent: <Agent or wallet id for Session/Cert settle>'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does SQLGuard — Execution Certificate Firewall need an API key?
Yes. It expects X-SQLGuard-Agent, which you set in its configuration.
Is SQLGuard — Execution Certificate Firewall open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains SQLGuard — Execution Certificate Firewall?
It is published by cabbageandtea. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.