Mmcp.market

Evolveguard MCP server

by RudrenduPaul·io.github.RudrenduPaul/evolveguard·v0.1.4

Wraps the evolveguard CLI as a single generic MCP tool for agent-skill file safety checks.

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

1 stars31 downloads/wk

Reviews

Write one

Nobody has reviewed Evolveguard yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Evolveguard tools (1, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • runwrite action

Public scan report

scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it

no findings
  • Code scan16 source files scanned25/25
  • Live reliabilityno gateway calls yet and no remote to proben/a
  • Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 13 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Evolveguard repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.RudrenduPaul/evolveguard -->

evolveguard

What it does • Quickstart • CLI reference • Agent-native usage • MCP server • How it compares • FAQ

Catch behavioral drift when a Claude Agent Skill or a Claude Code MEMORY.md file edits itself, before the edit ships.

# PyPI -- Python CLI + library (genuine port, not a Node wrapper)
pip install evolveguard-cli
# npm -- JavaScript/TypeScript CLI + library
npm install -g evolveguard-cli

[!NOTE]

Both packages are live and named consistently: evolveguard-cli on PyPI and

evolveguard-cli on npm (renamed 2026-07-19 from the old plain evolveguard,

which is now deprecated on both registries). npm install -g evolveguard-cli and

pip install evolveguard-cli both work today; the demo GIFs below were recorded

against the published packages, not a local build.

What it does

evolveguard record ./SKILL.md --fixtures ./fixtures.json
# ... skill gets edited, by a human or an agent ...
evolveguard check ./SKILL.md
EvolveGuard v0.1.4 -- Regression Check
skill: monorepo-scanner  baseline: 2026-07-15  fixtures: 1

[DRIFT] fixture: "scan a monorepo"  new tool call: fs.write (baseline had none)
         -> new tool call: fs.write (baseline had none) -- this edit introduces a
            capability the baseline never used

0 PASS, 1 DRIFT, 0 FAIL
exit code 1 (DRIFT blocks merge by default; override with --allow-drift)

That's real output from this repo's own fixtures/labeled-non-breaking-edits/case-03-add-write-capability/ test case, wired to filesystem: read-only becoming read-write in the skill's frontmatter. Reproduce it yourself: evolveguard record the before/SKILL.md in that folder against its fixtures.json, then evolveguard check the after/SKILL.md.

Features

Static analysis, not a live agent run. record parses a skill file's YAML frontmatter (declared tools, network, filesystem, scope, and any bundled hooks), scans the skill's body text and hook scripts for evidence of network calls or filesystem writes, and combines both into a capability surface. check re-parses the edited file with the same logic and diffs the result. Neither command runs eval, shells out to a subprocess, or executes a skill's hook scripts, in either the TypeScript or the Python distribution.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

claude mcp add evolveguard -- uvx evolveguard-cli
Add to Cursor

Evolveguard: common questions

Is Evolveguard MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Evolveguard safety report
How do I install Evolveguard?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Evolveguard need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Evolveguard maintained?
The last commit was 13 days ago (2026-09-11). The latest release is v0.1.4.
What can I use instead of Evolveguard?
Servers from other publishers that do the same job: mcptoon MCP server, Basic Memory MCP server and REA MCP server. Compare all Evolveguard alternatives.

Alternatives to Evolveguard

Same job from other publishers: the closest match first, then the best rated.

All Evolveguard alternatives →
  • mcptoon
    MCP tools + agent skills in one zero-dependency CLI: 71,929 -> 581 tokens (-99.2%, measured).
    A
  • Basic Memory
    Local-first knowledge management with bi-directional LLM sync via Markdown files.
    C
  • REA
    Reverse engineer anything from your terminal or agent with one CLI and MCP server.
    A
  • Skillsmith
    Share agent skills across your team, scan them for risk, and track what's actually used.
    B
  • three.ws Marketplace
    Browse and discover the public three.ws agent marketplace and skills catalog. Read-only.
    A

More from RudrenduPaul