AgentGuard MCP

AgentGuard MCP provides signed spend decisions for MCP hosts, enabling local spend caps, kill-switch blocking, and Ed25519-signed receipts for AI agent tool calls. It allows agents to enforce policy before provider dispatch, block or downgrade calls, and record tamper-evident, hash-chained logs of decisions.

Visit Dunecrest Ventures Inc.

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

Community listingLocal stdioSource reviewed; not executedPublished by Dunecrest Ventures Inc.

You need:Free on one machine. No account or key.Install the free pluginnpm install @agentguard-run/spendConfigure Ed25519 keys to append SHA-256 hash-chained records

Vendor documentation

What you can do with it

Enforce per-call or per-day spend caps on AI agent tool calls
Block unauthorized tool calls before they are dispatched to providers
Generate Ed25519-signed receipts for auditability of agent decisions
Verify signed spend decisions offline using hash-chained logs

Source and maintenance

Community listingRegistry 0.3.1

mcp-registry: io.github.MerchantGuard/agentguard@0.3.1 Source repository Project website

Maintenance checked: Oct 31, 2026, 10:27 PM UTC

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

@agentguard-run/mcp 0.3.1

npmnpx

@agentguard-run/mcp package definition

{
  "version": "0.3.1",
  "transport": "stdio",
  "identifier": "@agentguard-run/mcp",
  "runtimeHint": "npx",
  "registryType": "npm",
  "environmentVariables": [
    {
      "name": "AGENTGUARD_MCP_DAILY_CAP_CENTS",
      "format": "number",
      "default": "500",
      "description": "Local daily spend cap in cents. A nonnegative integer."
    },
    {
      "name": "AGENTGUARD_MCP_PER_CALL_CAP_CENTS",
      "format": "number",
      "default": "100",
      "description": "Local per-call spend cap in cents. A nonnegative integer."
    },
    {
      "name": "AGENTGUARD_MCP_TENANT",
      "format": "string",
      "default": "mcp-local",
      "description": "Tenant identifier stamped into local receipts."
    },
    {
      "name": "AGENTGUARD_HOME",
      "format": "filepath",
      "description": "Local signing-key, configuration and ledger directory. Defaults to .agentguard in the operating system home directory."
    },
    {
      "name": "AGENTGUARD_MCP_LEDGER",
      "format": "string",
      "choices": [
        "ndjson",
        "memory"
      ],
      "default": "ndjson",
      "description": "Local decision storage. ndjson persists receipts across restarts; memory retains this process only."
    },
    {
      "name": "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE",
      "format": "string",
      "choices": [
        "0",
        "1"
      ],
      "default": "0",
      "description": "Set to 1 to discard and prevent model pricing overrides for this server."
    },
    {
      "name": "AGENTGUARD_LOCK_COST_OVERRIDES",
      "format": "string",
      "choices": [
        "0",
        "1"
      ],
      "default": "0",
      "description": "Spend SDK startup lock. Set to 1 to prevent model pricing overrides."
    },
    {
      "name": "AGENTGUARD_ACTOR_DIGEST",
      "format": "string",
      "choices": [
        "0",
        "1"
      ],
      "default": "0",
      "description": "Set to 1 to hash actor identifiers before they enter local receipts."
    },
    {
      "name": "AGENTGUARD_LICENSE_KEY",
      "format": "string",
      "description": "Optional AgentGuard license key for license validation and seat registration. Otherwise read from local configuration."
    },
    {
      "name": "AGENTGUARD_LICENSE_ENDPOINT",
      "format": "string",
      "default": "https://agentguard.run",
      "description": "License and seat service base URL. No prompts, tool content or receipts are sent."
    },
    {
      "name": "AGENTGUARD_NO_BEACON",
      "format": "string",
      "choices": [
        "0",
        "1"
      ],
      "default": "0",
      "description": "Set to 1 to disable optional activation telemetry regardless of saved consent."
    },
    {
      "name": "AGENTGUARD_TELEMETRY",
      "format": "string",
      "choices": [
        "0",
        "1"
      ],
      "default": "0",
      "description": "Set to 1 to opt in to content-free activation telemetry. Otherwise saved consent applies, default off."
    },
    {
      "name": "AGENTGUARD_INSTALL_ID",
      "format": "string",
      "description": "Optional identifier used only by opted-in activation telemetry when no saved install identifier exists."
    },
    {
      "name": "AGENTGUARD_ANONYMOUS_INSTALL_ID",
      "format": "string",
      "description": "Legacy fallback for AGENTGUARD_INSTALL_ID in opted-in activation telemetry."
    },
    {
      "name": "CI",
      "format": "string",
      "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
    },
    {
      "name": "GITHUB_ACTIONS",
      "format": "string",
      "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
    },
    {
      "name": "GITLAB_CI",
      "format": "string",
      "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
    },
    {
      "name": "CIRCLECI",
      "format": "string",
      "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
    },
    {
      "name": "BUILDKITE",
      "format": "string",
      "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
    },
    {
      "name": "VERCEL",
      "format": "string",
      "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
    },
    {
      "name": "NETLIFY",
      "format": "string",
      "description": "Existing runtime marker. A nonempty value marks opted-in activation telemetry as CI; it does not enable telemetry."
    }
  ]
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

No tool definitions available.

Connect from your client

Each snippet configures the same source-provided package; replace placeholders before use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Cursor

Merge this local stdio configuration, replace every placeholder environment value, and restart Cursor. Koskamo has not executed this package.

Cursor configuration

{
  "mcpServers": {
    "agentguard-mcp-agentguard-run-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@agentguard-run/mcp@0.3.1"
      ],
      "env": {
        "AGENTGUARD_MCP_DAILY_CAP_CENTS": "<YOUR_AGENTGUARD_MCP_DAILY_CAP_CENTS>",
        "AGENTGUARD_MCP_PER_CALL_CAP_CENTS": "<YOUR_AGENTGUARD_MCP_PER_CALL_CAP_CENTS>",
        "AGENTGUARD_MCP_TENANT": "<YOUR_AGENTGUARD_MCP_TENANT>",
        "AGENTGUARD_HOME": "<YOUR_AGENTGUARD_HOME>",
        "AGENTGUARD_MCP_LEDGER": "<YOUR_AGENTGUARD_MCP_LEDGER>",
        "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE": "<YOUR_AGENTGUARD_MCP_DISABLE_COST_OVERRIDE>",
        "AGENTGUARD_LOCK_COST_OVERRIDES": "<YOUR_AGENTGUARD_LOCK_COST_OVERRIDES>",
        "AGENTGUARD_ACTOR_DIGEST": "<YOUR_AGENTGUARD_ACTOR_DIGEST>",
        "AGENTGUARD_LICENSE_KEY": "<YOUR_AGENTGUARD_LICENSE_KEY>",
        "AGENTGUARD_LICENSE_ENDPOINT": "<YOUR_AGENTGUARD_LICENSE_ENDPOINT>",
        "AGENTGUARD_NO_BEACON": "<YOUR_AGENTGUARD_NO_BEACON>",
        "AGENTGUARD_TELEMETRY": "<YOUR_AGENTGUARD_TELEMETRY>",
        "AGENTGUARD_INSTALL_ID": "<YOUR_AGENTGUARD_INSTALL_ID>",
        "AGENTGUARD_ANONYMOUS_INSTALL_ID": "<YOUR_AGENTGUARD_ANONYMOUS_INSTALL_ID>",
        "CI": "<YOUR_CI>",
        "GITHUB_ACTIONS": "<YOUR_GITHUB_ACTIONS>",
        "GITLAB_CI": "<YOUR_GITLAB_CI>",
        "CIRCLECI": "<YOUR_CIRCLECI>",
        "BUILDKITE": "<YOUR_BUILDKITE>",
        "VERCEL": "<YOUR_VERCEL>",
        "NETLIFY": "<YOUR_NETLIFY>"
      }
    }
  }
}

Cline

Merge this local stdio configuration, replace every placeholder environment value, and restart Cline. Koskamo has not executed this package.

Cline configuration

{
  "mcpServers": {
    "agentguard-mcp-agentguard-run-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@agentguard-run/mcp@0.3.1"
      ],
      "env": {
        "AGENTGUARD_MCP_DAILY_CAP_CENTS": "<YOUR_AGENTGUARD_MCP_DAILY_CAP_CENTS>",
        "AGENTGUARD_MCP_PER_CALL_CAP_CENTS": "<YOUR_AGENTGUARD_MCP_PER_CALL_CAP_CENTS>",
        "AGENTGUARD_MCP_TENANT": "<YOUR_AGENTGUARD_MCP_TENANT>",
        "AGENTGUARD_HOME": "<YOUR_AGENTGUARD_HOME>",
        "AGENTGUARD_MCP_LEDGER": "<YOUR_AGENTGUARD_MCP_LEDGER>",
        "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE": "<YOUR_AGENTGUARD_MCP_DISABLE_COST_OVERRIDE>",
        "AGENTGUARD_LOCK_COST_OVERRIDES": "<YOUR_AGENTGUARD_LOCK_COST_OVERRIDES>",
        "AGENTGUARD_ACTOR_DIGEST": "<YOUR_AGENTGUARD_ACTOR_DIGEST>",
        "AGENTGUARD_LICENSE_KEY": "<YOUR_AGENTGUARD_LICENSE_KEY>",
        "AGENTGUARD_LICENSE_ENDPOINT": "<YOUR_AGENTGUARD_LICENSE_ENDPOINT>",
        "AGENTGUARD_NO_BEACON": "<YOUR_AGENTGUARD_NO_BEACON>",
        "AGENTGUARD_TELEMETRY": "<YOUR_AGENTGUARD_TELEMETRY>",
        "AGENTGUARD_INSTALL_ID": "<YOUR_AGENTGUARD_INSTALL_ID>",
        "AGENTGUARD_ANONYMOUS_INSTALL_ID": "<YOUR_AGENTGUARD_ANONYMOUS_INSTALL_ID>",
        "CI": "<YOUR_CI>",
        "GITHUB_ACTIONS": "<YOUR_GITHUB_ACTIONS>",
        "GITLAB_CI": "<YOUR_GITLAB_CI>",
        "CIRCLECI": "<YOUR_CIRCLECI>",
        "BUILDKITE": "<YOUR_BUILDKITE>",
        "VERCEL": "<YOUR_VERCEL>",
        "NETLIFY": "<YOUR_NETLIFY>"
      }
    }
  }
}

VS Code

Merge this local stdio configuration, replace every placeholder environment value, and restart VS Code. Koskamo has not executed this package.

VS Code configuration

{
  "servers": {
    "agentguard-mcp-agentguard-run-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@agentguard-run/mcp@0.3.1"
      ],
      "env": {
        "AGENTGUARD_MCP_DAILY_CAP_CENTS": "<YOUR_AGENTGUARD_MCP_DAILY_CAP_CENTS>",
        "AGENTGUARD_MCP_PER_CALL_CAP_CENTS": "<YOUR_AGENTGUARD_MCP_PER_CALL_CAP_CENTS>",
        "AGENTGUARD_MCP_TENANT": "<YOUR_AGENTGUARD_MCP_TENANT>",
        "AGENTGUARD_HOME": "<YOUR_AGENTGUARD_HOME>",
        "AGENTGUARD_MCP_LEDGER": "<YOUR_AGENTGUARD_MCP_LEDGER>",
        "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE": "<YOUR_AGENTGUARD_MCP_DISABLE_COST_OVERRIDE>",
        "AGENTGUARD_LOCK_COST_OVERRIDES": "<YOUR_AGENTGUARD_LOCK_COST_OVERRIDES>",
        "AGENTGUARD_ACTOR_DIGEST": "<YOUR_AGENTGUARD_ACTOR_DIGEST>",
        "AGENTGUARD_LICENSE_KEY": "<YOUR_AGENTGUARD_LICENSE_KEY>",
        "AGENTGUARD_LICENSE_ENDPOINT": "<YOUR_AGENTGUARD_LICENSE_ENDPOINT>",
        "AGENTGUARD_NO_BEACON": "<YOUR_AGENTGUARD_NO_BEACON>",
        "AGENTGUARD_TELEMETRY": "<YOUR_AGENTGUARD_TELEMETRY>",
        "AGENTGUARD_INSTALL_ID": "<YOUR_AGENTGUARD_INSTALL_ID>",
        "AGENTGUARD_ANONYMOUS_INSTALL_ID": "<YOUR_AGENTGUARD_ANONYMOUS_INSTALL_ID>",
        "CI": "<YOUR_CI>",
        "GITHUB_ACTIONS": "<YOUR_GITHUB_ACTIONS>",
        "GITLAB_CI": "<YOUR_GITLAB_CI>",
        "CIRCLECI": "<YOUR_CIRCLECI>",
        "BUILDKITE": "<YOUR_BUILDKITE>",
        "VERCEL": "<YOUR_VERCEL>",
        "NETLIFY": "<YOUR_NETLIFY>"
      }
    }
  }
}

Claude Desktop

Merge this local stdio configuration, replace every placeholder environment value, and restart Claude Desktop. Koskamo has not executed this package.

Claude Desktop configuration

{
  "mcpServers": {
    "agentguard-mcp-agentguard-run-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@agentguard-run/mcp@0.3.1"
      ],
      "env": {
        "AGENTGUARD_MCP_DAILY_CAP_CENTS": "<YOUR_AGENTGUARD_MCP_DAILY_CAP_CENTS>",
        "AGENTGUARD_MCP_PER_CALL_CAP_CENTS": "<YOUR_AGENTGUARD_MCP_PER_CALL_CAP_CENTS>",
        "AGENTGUARD_MCP_TENANT": "<YOUR_AGENTGUARD_MCP_TENANT>",
        "AGENTGUARD_HOME": "<YOUR_AGENTGUARD_HOME>",
        "AGENTGUARD_MCP_LEDGER": "<YOUR_AGENTGUARD_MCP_LEDGER>",
        "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE": "<YOUR_AGENTGUARD_MCP_DISABLE_COST_OVERRIDE>",
        "AGENTGUARD_LOCK_COST_OVERRIDES": "<YOUR_AGENTGUARD_LOCK_COST_OVERRIDES>",
        "AGENTGUARD_ACTOR_DIGEST": "<YOUR_AGENTGUARD_ACTOR_DIGEST>",
        "AGENTGUARD_LICENSE_KEY": "<YOUR_AGENTGUARD_LICENSE_KEY>",
        "AGENTGUARD_LICENSE_ENDPOINT": "<YOUR_AGENTGUARD_LICENSE_ENDPOINT>",
        "AGENTGUARD_NO_BEACON": "<YOUR_AGENTGUARD_NO_BEACON>",
        "AGENTGUARD_TELEMETRY": "<YOUR_AGENTGUARD_TELEMETRY>",
        "AGENTGUARD_INSTALL_ID": "<YOUR_AGENTGUARD_INSTALL_ID>",
        "AGENTGUARD_ANONYMOUS_INSTALL_ID": "<YOUR_AGENTGUARD_ANONYMOUS_INSTALL_ID>",
        "CI": "<YOUR_CI>",
        "GITHUB_ACTIONS": "<YOUR_GITHUB_ACTIONS>",
        "GITLAB_CI": "<YOUR_GITLAB_CI>",
        "CIRCLECI": "<YOUR_CIRCLECI>",
        "BUILDKITE": "<YOUR_BUILDKITE>",
        "VERCEL": "<YOUR_VERCEL>",
        "NETLIFY": "<YOUR_NETLIFY>"
      }
    }
  }
}

Let your agent find its tools

Find servers like AgentGuard MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows

See all 7,575