Guardian MCP server

Read from the package source without running it. The installed server may list more.

• analyze

  Scan text for prompt injection, jailbreaks, data-exfiltration and related threats. `source_type` (e.g. 'document', 'tool_output', 'web_page') raises the weighting for untrusted sources. Returns Guardian's verdict + reasoning.

• scan_documents

  Decode and scan documents at the ingestion boundary. Each item is {"filename": "...", "data": "<base64>"} (PDF/DOCX/PPTX/XLSX/RTF/TXT). Scans all and reports per-document verdicts; with `return_text=True`, also returns the server-side extracted safe text for API callers.

• scan_tool_call

  Screen a tool/function call the model wants to make BEFORE you execute it — catches dangerous invocations (shell, package installs, exfiltration, destructive ops). Returns whether the call is dangerous + the recommended action.

• scan_tool_output

  Screen a tool / API / RAG result BEFORE it re-enters the model's context — catches indirect (injection) payloads hidden in fetched content.

• Code scan6 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancerepository not readable: unknown3/15
• Maintainer identityno repository or website to verify2/10

Safety score

55/100

higher than 9% of 1,299 Productivity servers

Tools

4

the typical Productivity server has 7

Tools that change things

0%

typical: 0%. Fewer write tools means less an agent can break

Downloads a week

296

more than 76% of 427 Productivity servers with a package

Guardian: common questions

Is Guardian MCP server safe?

With care: it is graded C, so read the findings first (55/100). Read the Guardian safety report

How do I install Guardian?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Guardian need an API key?

Yes. The registry entry asks for ETHICORE_API_KEY, ETHICORE_SELFHOST_LICENSE.

Is Guardian maintained?

The latest release is v0.1.2.

What can I use instead of Guardian?

Servers from other publishers that do the same job: Tidewave Phoenix MCP server, WTFM MCP server and @imqueue MCP server.

How does Guardian compare with other Productivity MCP servers?

safety score 55/100 (higher than 9% of 1,299 Productivity servers); tools 4 (the typical Productivity server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.