English Français العربية

io.github.MukundaKatta/agentguard

Official registry AI and agents

Network-egress firewall for agent tools: check URLs against a declarative policy.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @mukundakatta/agentguard-mcp
Claude Code 
claude mcp add agentguard -- npx -y @mukundakatta/agentguard-mcp@0.1.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "agentguard": {
            "command": "npx",
            "args": [
                "-y",
                "@mukundakatta/agentguard-mcp@0.1.0"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. agentguard-mcp
  2. Add to your client
  3. Tool examples
  4. Why a separate MCP server
  5. Sibling MCP servers
  6. License

agentguard-mcp

MCP server for @mukundakatta/agentguard. Lets Claude Desktop, Cursor, Cline, Windsurf, Zed, or any other MCP client check whether a URL is allowed under a network-egress policy before any fetch.

npx -y @mukundakatta/agentguard-mcp

Three tools:

  • check_url — single URL check: returns { allowed, reason } without making any actual request.
  • check_urls_batch — batch check with per-URL decisions plus a summary.
  • validate_policy — sanity-check a policy spec for empty allowlists, overly broad * wildcards, and malformed host patterns.

Add to your client

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "agentguard": {
      "command": "npx",
      "args": ["-y", "@mukundakatta/agentguard-mcp"]
    }
  }
}

Same shape for Cursor (~/.cursor/mcp.json), Cline, Windsurf, Zed.

Tool examples

check_url:

{
  "url": "https://api.openai.com/v1/chat",
  "policy": { "allow": ["api.openai.com", "*.anthropic.com"] }
}

Returns:

{ "allowed": true, "reason": "matched_allowlist", "detail": null }

check_urls_batch:

{
  "urls": [
    "https://api.openai.com/v1/chat",
    "https://evil.example.com/leak"
  ],
  "policy": { "allow": ["api.openai.com"] }
}

Returns:

{
  "results": [
    { "url": "https://api.openai.com/v1/chat", "allowed": true, ... },
    { "url": "https://evil.example.com/leak", "allowed": false, "reason": "not_in_allowlist", ... }
  ],
  "summary": { "total": 2, "allowed_count": 1, "denied_count": 1 }
}

validate_policy:

{ "policy": { "allow": ["*", "https://api.example.com", "api.example.com/v1"] } }

Returns issues for the * wildcard, the scheme prefix, and the path suffix — common mistakes when first writing a policy.

Why a separate MCP server

@mukundakatta/agentguard is a zero-dependency JavaScript library. This MCP server makes its decision engine accessible from any MCP-aware AI assistant: ask Claude "does my agent's tool list pass this firewall?" or "which of these 50 URLs would my policy block?" and the assistant calls these tools directly.

Note: this MCP server only checks URLs — it does not actually wrap fetch or block real requests. For runtime enforcement, use @mukundakatta/agentguard directly inside your Node process.

Sibling MCP servers

Part of the agent-stack series:

License

MIT

Frequently asked questions

What is io.github.MukundaKatta/agentguard?

Network-egress firewall for agent tools: check URLs against a declarative policy.

How do I install io.github.MukundaKatta/agentguard?

It runs on your machine. In Claude Code: claude mcp add agentguard -- npx -y @mukundakatta/agentguard-mcp@0.1.0. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.MukundaKatta/agentguard need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.MukundaKatta/agentguard open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.MukundaKatta/agentguard?

It is published by MukundaKatta. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.