Guardrail MCP
Deterministic preflight checks for credentials, fund transfers, writes, and prompt overrides.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http guardrail-mcp 'https://guardrail-mcp.kadopi.workers.dev/mcp'
{
"mcpServers": {
"guardrail-mcp": {
"type": "http",
"url": "https://guardrail-mcp.kadopi.workers.dev/mcp"
}
}
}
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Guardrail MCP
Small, free, read-only Remote MCP for deterministic action preflight.
It exposes two tools:
get_guardrail_capabilitiesassess_action_risk
The check detects a deliberately small set of high-risk patterns: credential exposure, fund movement, external writes, and instruction overrides. It does not execute an action, persist a request, authenticate a user, charge a payment, call AI, or fetch external URLs.
Local use
npm run check
npm test
npm run dev
Endpoints: GET /, GET /health, and stateless Streamable HTTP POST /mcp.
Boundary
This is an informational deterministic preflight, not a safety guarantee or legal, financial, or security advice. Deployment and any public endpoint require separate approval.
Frequently asked questions
What is Guardrail MCP?
Deterministic preflight checks for credentials, fund transfers, writes, and prompt overrides.
How do I install Guardrail MCP?
It runs as a remote server. In Claude Code: claude mcp add --transport http guardrail-mcp 'https://guardrail-mcp.kadopi.workers.dev/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does Guardrail MCP need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is Guardrail MCP open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains Guardrail MCP?
It is published by kadopi. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.