Guardian Engine MCP server
online · 100% uptimedev.kaimeilabs/guardian-engine·v1.0.0Deterministic recipe verification engine — validates AI-generated recipes against master SOPs.
0 stars
Reviews
Write oneNobody has reviewed Guardian Engine yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Guardian Engine tools (7, 1 write)
write = sends, deletes, buys or postscheck_allergensFreeCheck ingredients for EU FIC 1169/2011 allergen compliance. Returns a detailed audit trace mapping each ingredient to its EU Annex II allergen group with entry numbers and labels. The safety verdict is deterministic — no LLM involvement in the decision — and is pinned by the returned ``kb_version_hash``. Use check_all_eu_allergens=True for food labelling (detect all allergens). Use restrictions=['dairy', 'gluten'] to check for specific user allergies. Supplying neither runs the full 14-group Annex II scan and sets ``defaulted_to_full_scan`` — the tool never reports "safe" without checking. ``is_safe`` answers "was a supplied restriction violated?"; ``declared_allergens`` answers "what is actually present?". Read both.
check_safetywrite actionFreeRun master-independent safety checks on a candidate recipe. Works for ANY recipe — no dish resolution, no master SOP required. Checks poultry internal-temperature safety and scans all ingredients for the 14 EU FIC 1169/2011 Annex II allergen groups. The verdict is a deterministic function of (candidate, kb_version_hash) — no LLM involvement. Use this when verify_recipe has no matching master for the dish: the safety layer still applies to every recipe. Returns: Safety envelope: verdict (PASSED/FAILED per the zero-critical policy gate), safe flag, issues found, and the pinned kb_version_hash.
fix_recipeFreeDeterministically repair a candidate recipe against a Guardian master. Verifies the candidate, applies every machine-actionable correction the symbolic engine produced (missing ingredients, quantities, temperatures, durations, cooking media, ingredient substitutions), then re-verifies the result. No LLM is used — the repair is a deterministic function of the candidate recipe and the master ruleset. Findings that need recipe-authoring judgement — adding a whole cooking phase, rewriting step instructions, ingredient-ratio rebalancing — are not auto-applied; they are returned under `patches_skipped`. Allergen findings are never auto-fixed. The response reports the verdict before and after so the caller can see exactly what was resolved. Note: `verdict_after` may still be FAILED when structural changes (e.g. adding a cooking step, rebalancing ingredient ratios) are needed. These require recipe-authoring judgement and are returned under `patches_skipped`. Callers should NOT assume a fixed recipe will pass verification.
get_masterFreeReturn the canonical master recipe for a dish (read-only, no LLM). Enables compare-then-verify agentic loops: fetch the master, diff it against the user's recipe, then call verify_recipe — instead of verifying blind. Pure knowledge-base lookup, no LLM in the hot path. Master content is transparent by default (ADR-009 / ADR-010): exact temperatures, timings, and EU FIC 1169/2011 allergen codes are returned verbatim, never obfuscated. No score is included (ADR-013) — this is reference data, not a verdict. Returns ingredients, steps (technique/temperature/timing/medium), and the EU FIC allergens derived from the required ingredients. Unknown dishes return a structured UNKNOWN_DISH error.
list_dishesFreeList all available master dishes with rich metadata. This is a browse/discovery step, not the verification itself — after picking a dish, call verify_recipe(dish_name=<slug>, candidate_json=<your recipe>) to actually check a candidate against it (or fix_recipe to auto-repair it). Returns: Dictionary with `schema_version`, a `dishes` list (slug, title, cuisine, region, aliases, complexity per dish), and a `next_step` hint describing how to proceed to verification.
verify_dietary_claimFreeVerify that a recipe satisfies a dietary claim (vegan, halal, gluten-free, ...). Reuses the existing allergen-detection logic plus a curated forbidden-ingredient map (apps/guardian/knowledge/dietary_claims.yaml). Returns a structured verdict with the specific offending ingredients and a short justification — never a vague paraphrase.
verify_recipeFreeVerify a candidate recipe against a Guardian master recipe. Uses deterministic graph-based verification to check technique, temperature, timing, cooking medium, and required ingredients. **Verdict**: `verdict` is strictly PASSED or FAILED and is policy-driven — any CRITICAL finding fails the recipe; more than 5 WARNINGs also fail. There is no score in the response (ADR-013): gate on `verdict` and explain failures from `findings`. **Field audience**: `issue` is a machine-readable code for programmatic handling — never show it to end users. Use `title` and `suggested_correction` as the user-facing fields. Returns structured JSON by default (machine-actionable findings and patches); response_format="text" renders a human-readable report. Both formats are transparent (ADR-009 / ADR-018): exact values and ingredient names included.
Public scan report
scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 797ms20/20
- Tool poisoning7 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
- Maintenancelast push 70 days ago12/15
- Maintainer identityendpoint served from the registry-verified namespace domain8/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
How Guardian Engine compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 77/100
- higher than 50% of 48,255 servers
- Tools
- 7
- the typical server has 7
- Tools that change things
- 14%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote server answers 100%
- Response time
- 234 ms
- faster than 58% of 30,031 servers
What its tools let an agent do: 6 read · 1 change
Install Guardian Engine in Claude Code, Cursor or VS Code
claude mcp add --transport http guardian-engine https://api.kaimeilabs.dev/mcp
What the publisher says
From the Guardian Engine repository's README, as published. We do not edit it. Read it on GitHub
Guardian Engine — API & MCP Integration Guide
A deterministic oracle inside your agent's generate→verify loop. Your LLM authors the recipe; Guardian judges it. Guardian Engine catches hallucinated temperatures, missing techniques, wrong ingredients, and impossible cooking steps before they reach the pan — and returns machine-actionable patches so your agent can fix exactly what's wrong. Recipes are the first vertical — the same deterministic approach generalises to any procedural domain where correctness matters.
Why an oracle instead of another LLM critique? An LLM critique is a sample — it misses differently on every run. Guardian's symbolic engine makes guarantees a generative model structurally cannot:
- Exhaustive checking — every rule is evaluated on every call, not a sample of them.
- Certified negatives — "no EU Annex II allergen source detected" is an absence claim an LLM cannot make.
- Replayable verdicts — same input + same spec + same knowledge-base version → byte-identical output. Every response pins kbversionhash and master_hash so any verdict is reproducible as an audit record.
- Machine-actionable repair — findings come with structured patches (and fix_recipe can apply them deterministically); your agent authors the rest and re-verifies.
- Bring your own spec — verify against your house recipe or SOP via master_json, not just the bundled catalog.
Endpoint: https://api.kaimeilabs.dev/mcp Transport: Streamable HTTP (MCP) Auth: None — free during early access (fair use applies)
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Guardian Engine: common questions
- Is Guardian Engine MCP server safe?
- Mostly: it is graded B (77/100). Read the Guardian Engine safety report
- How do I install Guardian Engine?
- It runs remotely at api.kaimeilabs.dev. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Guardian Engine need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Guardian Engine maintained?
- The last commit was 107 days ago (2026-07-20). The latest release is v1.0.0.
- Is Guardian Engine up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Guardian Engine?
- Servers from other publishers that do the same job: Oh My Posh Validator MCP server.
- How does Guardian Engine compare with other MCP servers?
- safety score 77/100 (higher than 50% of 48,255 servers); tools 7 (the typical server has 7); tools that change things 14% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Guardian Engine
Same job from other publishers: the closest match first, then the best rated.
- Oh My Posh ValidatorValidate oh-my-posh configurations and segment snippets against the official schema.not reviewedEstablishedA