{"name":"io.github.MerchantGuard/agentguard","slug":"merchantguard-agentguard","title":"AgentGuard","description":"Local spend caps, kill-switch blocking and Ed25519-signed receipts for AI agent tool calls.","url":"https://mcp.market/server/merchantguard-agentguard","rating":null,"grade":"A","score":85,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":27,"stars":0,"forks":0,"downloads_week":71,"last_push_at":"2026-10-06T23:35:44.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/MerchantGuard/agentguard-mcp","website":"https://agentguard.run","version":"0.3.1","remotes":[],"packages":[{"registryType":"npm","identifier":"@agentguard-run/mcp","version":"0.3.1","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Local daily spend cap in cents. A nonnegative integer.","format":"number","default":"500","name":"AGENTGUARD_MCP_DAILY_CAP_CENTS"},{"description":"Local per-call spend cap in cents. A nonnegative integer.","format":"number","default":"100","name":"AGENTGUARD_MCP_PER_CALL_CAP_CENTS"},{"description":"Tenant identifier stamped into local receipts.","format":"string","default":"mcp-local","name":"AGENTGUARD_MCP_TENANT"},{"description":"Local signing-key, configuration and ledger directory. Defaults to .agentguard in the operating system home directory.","format":"filepath","name":"AGENTGUARD_HOME"},{"description":"Local decision storage. ndjson persists receipts across restarts; memory retains this process only.","format":"string","default":"ndjson","choices":["ndjson","memory"],"name":"AGENTGUARD_MCP_LEDGER"},{"description":"Set to 1 to discard and prevent model pricing overrides for this server.","format":"string","default":"0","choices":["0","1"],"name":"AGENTGUARD_MCP_DISABLE_COST_OVERRIDE"},{"description":"Spend SDK startup lock. Set to 1 to prevent model pricing overrides.","format":"string","default":"0","choices":["0","1"],"name":"AGENTGUARD_LOCK_COST_OVERRIDES"},{"description":"Set to 1 to hash actor identifiers before they enter local receipts.","format":"string","default":"0","choices":["0","1"],"name":"AGENTGUARD_ACTOR_DIGEST"},{"description":"Optional AgentGuard license key for license validation and seat registration. Otherwise read from local configuration.","format":"string","isSecret":true,"name":"AGENTGUARD_LICENSE_KEY"},{"description":"License and seat service base URL. No prompts, tool content or receipts are sent.","format":"string","default":"https://agentguard.run","name":"AGENTGUARD_LICENSE_ENDPOINT"},{"description":"Set to 1 to disable optional activation telemetry regardless of saved consent.","format":"string","default":"0","choices":["0","1"],"name":"AGENTGUARD_NO_BEACON"},{"description":"Set to 1 to opt in to content-free activation telemetry. Otherwise saved consent applies, default off.","format":"string","default":"0","choices":["0","1"],"name":"AGENTGUARD_TELEMETRY"},{"description":"Optional identifier used only by opted-in activation telemetry when no saved install identifier exists.","format":"string","name":"AGENTGUARD_INSTALL_ID"},{"description":"Legacy fallback for AGENTGUARD_INSTALL_ID in opted-in activation telemetry.","format":"string","name":"AGENTGUARD_ANONYMOUS_INSTALL_ID"},{"description":"Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.","format":"string","name":"CI"},{"description":"Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.","format":"string","name":"GITHUB_ACTIONS"},{"description":"Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.","format":"string","name":"GITLAB_CI"},{"description":"Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.","format":"string","name":"CIRCLECI"},{"description":"Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.","format":"string","name":"BUILDKITE"},{"description":"Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.","format":"string","name":"VERCEL"},{"description":"Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry.","format":"string","name":"NETLIFY"}]}],"tools":[{"name":"export_receipts","description":"Export the tenant decision ledger, including earlier process runs, as a hash-chained array of signed receipts with a chain verification result. Memory mode exports this process only.","write_action":false,"price_micros":0,"input_schema":null},{"name":"provenance_preview","description":"Preview the provenance AgentGuard would attest for a model and endpoint WITHOUT spending: model identity, weights origin country (China-origin families flagged), hosting jurisdiction, retention posture.","write_action":false,"price_micros":0,"input_schema":null},{"name":"set_model_cost","description":"Register a cost for a model with no built-in pricing (required for self-hosted models: AgentGuard fails closed on unknown costs). Cents per 1,000 tokens.","write_action":false,"price_micros":0,"input_schema":null},{"name":"spend_decide","description":"Gate a model call BEFORE it runs. Pass metadata only (model, token counts, endpoint URL), never prompt content. Returns allow/block plus an Ed25519-signed, content-free receipt with model and hosting provenance (weights origin, jurisdiction, retention). Unknown self-hosted models need set_model_cost first (fail-closed).","write_action":false,"price_micros":0,"input_schema":null},{"name":"spend_status","description":"Show the active policy: caps, tenant, enforcement mode, decisions so far this session, and the signer identity.","write_action":false,"price_micros":0,"input_schema":null},{"name":"verify_receipt","description":"Independently verify an AgentGuard signed receipt. Returns valid true/false. Tampering with any signed field makes verification fail.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":85,"grade":"A","scanned_at":"2026-11-01T13:27:03.964Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-11-01T13:27:03.937Z","components":{"code":{"score":25,"max":25,"notes":["6 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 26 days ago"]},"identity":{"score":9,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@agentguard-run/mcp","version":"0.3.1","found":true,"license":"SEE LICENSE IN LICENSE","hasInstallScripts":false,"dependencyCount":4,"publishedAt":"2026-09-21T18:20:52.746Z","repositoryUrl":"git+https://github.com/MerchantGuard/agentguard-mcp.git","weeklyDownloads":71}],"repo":{"found":true,"owner":"MerchantGuard","repo":"agentguard-mcp","archived":false,"pushedAt":"2026-10-06T23:35:44Z","stars":0,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/288498464?v=4","ownerCreatedAt":"2025-01-13T02:06:08Z","license":"NOASSERTION"},"icon":{"url":"https://agentguard.run/favicon.svg","source":"registry"},"presence":{"stars":0,"forks":0,"downloadsWeek":71,"license":"NOASSERTION","lastPushAt":"2026-10-06T23:35:44.000Z","score":27}}}},"grade_history":[],"reviews":[]}