Guardrails MCP server
AI Agent Guardrails MCP server - security layer
1 stars45 downloads/wk
Reviews
Write oneNobody has reviewed Guardrails yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Guardrails tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it
- Code scan7 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 21 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Guardrails compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 90% of 4,460 AI and agents servers
- GitHub stars
- 1
- more than 50% of 2,711 AI and agents servers
- Downloads a week
- 45
- more than 37% of 1,538 AI and agents servers with a package
Install Guardrails in Claude Code, Cursor or VS Code
Runs npx -y guardrails-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add guardrails -- npx -y guardrails-mcp-server
What the publisher says
From the Guardrails repository's README, as published. We do not edit it. Read it on GitHub
guardrails-mcp-server
\ \ \
MCP server for AI agent security guardrails. Provides input validation, prompt injection detection, PII redaction, output filtering, policy enforcement, rate limiting, and comprehensive audit logging.
Tools
Security Features
- Prompt Injection Detection -- 12 regex patterns for jailbreak, DAN mode, system prompt override
- PII Detection and Redaction -- SSN, credit card, email, phone, IP, API keys, AWS keys, JWT, passwords, private keys, connection strings
- Malicious Code Blocking -- eval, exec, subprocess, child_process, shell injection
- Policy Engine -- Block sensitive paths, dangerous tools, unauthenticated destructive ops, URL allowlist, maintenance windows
- Rate Limiting -- Per-user sliding window (configurable requests/minute)
- Audit Logging -- Timestamped events with metrics, log rotation, external handler support
Install
npm installConfiguration
{
"mcpServers": {
"guardrails": {
"type": "stdio",
"command": "node",
"args": ["/path/to/guardrails-mcp-server/index.js"]
}
}
}Project Structure
src/engine/GuardrailsEngine.js # Core orchestration
src/validators/InputValidator.js # Prompt injection and PII detection
src/filters/OutputFilter.js # Redaction and harmful content blocking
src/policies/PolicyEngine.js # RBAC, quotas, maintenance windows
src/audit/AuditLogger.js # Event logging and metricsLicense
MIT
Nothing above is checked by us. What we check is on the safety report.
Guardrails: common questions
- Is Guardrails MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Guardrails safety report
- How do I install Guardrails?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Guardrails need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Guardrails maintained?
- The last commit was 57 days ago (2026-09-08). The latest release is v1.0.1.
- What can I use instead of Guardrails?
- Servers from other publishers that do the same job: Agent Security Scanner MCP server, agent-device MCP server and HOL Guard MCP server.
- How does Guardrails compare with other AI and agents MCP servers?
- safety score 92/100 (higher than 90% of 4,460 AI and agents servers); github stars 1 (more than 50% of 2,711 AI and agents servers); downloads a week 45 (more than 37% of 1,538 AI and agents servers with a package). Full comparison.
Alternatives to Guardrails
Same job from other publishers: the closest match first, then the best rated.
- Agent Security ScannerSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.not reviewedEstablishedC
- agent-deviceOpen source device layer for AI agents: control mobile, web, TV, and desktop apps over MCPnot reviewedWidely usedA
- HOL GuardLocal-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.not reviewedEstablishedA
- Agent RecallCorrection-first agent memory. Precision KPI tracks if agents heed warnings. 5 layers, local-only.not reviewedEstablishedA
- ShellwardAI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.not reviewedEstablishedA