Back to Browse

Guardrail MCP Server

by Kadopi
Developer ToolsModerate6.7MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Deterministic preflight checks for credentials, fund transfers, writes, and prompt overrides.

About

Deterministic preflight checks for credentials, fund transfers, writes, and prompt overrides.

Remote endpoints: streamable-http: https://guardrail-mcp.kadopi.workers.dev/mcp

Security Report

6.7
Moderate6.7Moderate Risk

Guardrail MCP is a well-designed, read-only preflight checker with strong security fundamentals. The server implements proper authentication via JSON-RPC, has no dangerous code execution patterns, stores no credentials, and makes no external network calls. Input validation is thorough and appropriately scoped. Minor code quality observations around broad error handling do not impact the security posture. Supply chain analysis found 1 known vulnerability in dependencies (1 critical, 0 high severity).

5 files analyzed · 3 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Guardrail MCP

Small, free, read-only Remote MCP for deterministic action preflight.

It exposes two tools:

  • get_guardrail_capabilities
  • assess_action_risk

The check detects a deliberately small set of high-risk patterns: credential exposure, fund movement, external writes, and instruction overrides. It does not execute an action, persist a request, authenticate a user, charge a payment, call AI, or fetch external URLs.

Local use

npm run check
npm test
npm run dev

Endpoints: GET /, GET /health, and stateless Streamable HTTP POST /mcp.

Boundary

This is an informational deterministic preflight, not a safety guarantee or legal, financial, or security advice. Deployment and any public endpoint require separate approval.

Reviews

No reviews yet

Be the first to review this server!