LocalFree

Guardian MCP server

rudraneel93/mcp-guardian

Security and governance proxy for MCP with YAML policies (blocklists, rate limits, token budgets), token cost tracking, health monitoring and RBAC.

4 GitHub stars1 forks
Source code

Install Guardian in Claude Code

Claude Code
claude mcp add guardian -- npx -y @mcp-guardian/server
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "guardian": {
      "command": "npx",
      "args": [
        "-y",
        "@mcp-guardian/server"
      ]
    }
  }
}

Frequently asked questions

What does the Guardian MCP server do?

Security and governance proxy for MCP with YAML policies (blocklists, rate limits, token budgets), token cost tracking, health monitoring and RBAC.

Is the Guardian MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Guardian run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Guardian to Claude Code?

Run: claude mcp add guardian -- npx -y @mcp-guardian/server

More security & identity MCP servers

View all

qURL

4

layervai/qurl-mcp

Mint, resolve, audit and rotate expiring, scope-limited access links (qURLs) via the qURL API.

LocalAccount neededTypeScript

Eleion Scanner

109

hernaninverso/eleion-scanner-mcp

Register and verify domains, queue security scans (headers, TLS, DNS, ports, CVEs and AI-specific checks) and read findings.

LocalAccount neededTypeScript

SafeNode MCP Gateway

0113

sp3ak/safenode-mcp-gateway

Fail-closed policy proxy for MCP tool calls that denies, warns on or holds each call for human approval before forwarding, with client-side redaction.

LocalAccount neededTypeScript

Czech PII Anonymizer & NLP

4

Buggy1111/anonymize-mcp

Anonymize PII for GDPR in Czech and many other languages using ÚFAL/LINDAT NLP (MasKIT, NameTag), plus morphology, translation and spellcheck.

LocalFreePython

SAST

4

Skyrxin/sast-mcp-server

SAST/DAST scanners (Bandit, Semgrep, Trivy, CodeQL, OWASP ZAP and more) with closed-loop remediation, SARIF/SBOM/VEX export and compliance reporting.

LocalFreePython

Cyntrisec CLI (Historical)

4

cyntrisec/cyntrisec-cli

Local-first AWS security analyzer that discovers attack paths and generates remediations using graph theory.

LocalFreePython