Evolveguard MCP server
Wraps the evolveguard CLI as a single generic MCP tool for agent-skill file safety checks.
1 stars31 downloads/wk
Reviews
Write oneNobody has reviewed Evolveguard yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Evolveguard tools (1, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
runwrite action
Public scan report
scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it
- Code scan16 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 13 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
What the publisher says
From the Evolveguard repository's README, as published. We do not edit it. Read it on GitHub
<!-- mcp-name: io.github.RudrenduPaul/evolveguard -->
evolveguard
What it does • Quickstart • CLI reference • Agent-native usage • MCP server • How it compares • FAQ
Catch behavioral drift when a Claude Agent Skill or a Claude Code MEMORY.md file edits itself, before the edit ships.
# PyPI -- Python CLI + library (genuine port, not a Node wrapper)
pip install evolveguard-cli# npm -- JavaScript/TypeScript CLI + library
npm install -g evolveguard-cli[!NOTE]
Both packages are live and named consistently: evolveguard-cli on PyPI and
evolveguard-cli on npm (renamed 2026-07-19 from the old plain evolveguard,
which is now deprecated on both registries). npm install -g evolveguard-cli and
pip install evolveguard-cli both work today; the demo GIFs below were recorded
against the published packages, not a local build.
What it does
evolveguard record ./SKILL.md --fixtures ./fixtures.json
# ... skill gets edited, by a human or an agent ...
evolveguard check ./SKILL.mdEvolveGuard v0.1.4 -- Regression Check
skill: monorepo-scanner baseline: 2026-07-15 fixtures: 1
[DRIFT] fixture: "scan a monorepo" new tool call: fs.write (baseline had none)
-> new tool call: fs.write (baseline had none) -- this edit introduces a
capability the baseline never used
0 PASS, 1 DRIFT, 0 FAIL
exit code 1 (DRIFT blocks merge by default; override with --allow-drift)That's real output from this repo's own fixtures/labeled-non-breaking-edits/case-03-add-write-capability/ test case, wired to filesystem: read-only becoming read-write in the skill's frontmatter. Reproduce it yourself: evolveguard record the before/SKILL.md in that folder against its fixtures.json, then evolveguard check the after/SKILL.md.
Features
Static analysis, not a live agent run. record parses a skill file's YAML frontmatter (declared tools, network, filesystem, scope, and any bundled hooks), scans the skill's body text and hook scripts for evidence of network calls or filesystem writes, and combines both into a capability surface. check re-parses the edited file with the same logic and diffs the result. Neither command runs eval, shells out to a subprocess, or executes a skill's hook scripts, in either the TypeScript or the Python distribution.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Install directly
claude mcp add evolveguard -- uvx evolveguard-cli
Evolveguard: common questions
- Is Evolveguard MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Evolveguard safety report
- How do I install Evolveguard?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Evolveguard need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Evolveguard maintained?
- The last commit was 13 days ago (2026-09-11). The latest release is v0.1.4.
- What can I use instead of Evolveguard?
- Servers from other publishers that do the same job: mcptoon MCP server, Basic Memory MCP server and REA MCP server. Compare all Evolveguard alternatives.
Alternatives to Evolveguard
Same job from other publishers: the closest match first, then the best rated.
- mcptoonMCP tools + agent skills in one zero-dependency CLI: 71,929 -> 581 tokens (-99.2%, measured).not reviewedEstablishedA
- Basic MemoryLocal-first knowledge management with bi-directional LLM sync via Markdown files.not reviewedEstablishedC
- REAReverse engineer anything from your terminal or agent with one CLI and MCP server.not reviewedEstablishedA
- SkillsmithShare agent skills across your team, scan them for risk, and track what's actually used.not reviewedEstablishedB
- three.ws MarketplaceBrowse and discover the public three.ws agent marketplace and skills catalog. Read-only.not reviewedEstablishedA