Aguara MCP
Local security checks for AI agents before they trust third-party tools. Aguara MCP gives Claude Code, Cursor, Windsurf, and any MCP-compatible agent a local tool for reviewing untrusted agent content before acting on it. Its 5 documented tools cluster into scan, check, read & search, explain.
People who work with ai security, prompt injection and static analysis and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Go.
VERIFIED ACTIVE
LAST COMMIT 2026-07-01 · ★ 4 · #190 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18
MIT · Go servers · how we verify → /methodology
01 · Install Aguara MCP
Claude Desktop
Settings → Extensions → Install, then select the https://github.com/garagon/aguara-mcp/releases/download/v0.2.0/aguara-mcp.mcpb .mcpb bundle02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as Claude Desktop extension (.mcpb bundle)
license MIT - declared in the repository
registry namespace io.github.garagon is GitHub-verified and matches the repo owner
03 · What Aguara MCP can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
An agent gets 5 documented tools across scan, check, read & search, including scan_content, check_mcp_config, list_rules, explain_rule.
Capability map
Tools grouped from the project's README - what Aguara MCP lets an agent do.
Scan
1 tool - e.g. Scan text for security threats before acting on it. Works on agent skills, READMEs, tool definitions, MCP server descriptions, prompts, package manifest content
scan_content
Check
1 tool - e.g. Check an MCP server configuration (JSON) for security issues before adding it to a client. Detects dangerous command shapes in command/args, credential exposure
check_mcp_config
read & search
1 tool - e.g. Browse the cataloged security rules. Returns 250 detections (193 YAML pattern rules + 57 analyzer-emitted rules from ci-trust, pkgmeta, jsrisk, pyrisk, rsbuild,
list_rules
Explain
1 tool - e.g. Get detailed information about a specific rule by ID. Resolves both YAML rules (returns patterns plus true/false-positive examples) and analyzer-emitted rule ID
explain_rule
Discover
1 tool - e.g. Discover MCP server configurations on the local machine by reading known MCP client config files (Claude Desktop, Cursor, VS Code, Windsurf, and others). Return
discover_mcp
Latest releases
v0.8.0 · 2026-07-01
Aguara MCP v0.8.0 aligns the server with Aguara core v0.27.0: agents now get the full 250-detection catalog, and scan_content gains the npm install-trust surface. This release is also the first one publishable to the…
v0.7.0 · 2026-06-10
Aligns mcp-aguara with Aguara v0.24.0 and unlocks the agent-trust surfaces through scan_content. An agent using this MCP can now vet the riskiest files a cloned repo ships for AI tools before trusting any of them…
v0.6.1 · 2026-05-21
Maintenance release. Aligns mcp-aguara with Aguara v0.18.2 - same five MCP tools, same 219-detection catalog, no schema changes. The relevant pickup from core is the sensitive: true flag on MCPCFG_003 ("Hardcoded…
04 · Who maintains Aguara MCP
Aguara MCP is maintained by garagon. We track 2 MCP servers from garagon - 2 actively maintained, 8 combined GitHub stars, oldest repo from Feb 2026.
05 · Facts
- repository
- github.com/garagon/aguara-mcp
- category
- security - ranked #190 of 204 actively-maintained security servers as of 2026-09-18.
- release cadence
- 1 release in the last 90 days (latest 2026-07-01)
- registry
- io.github.garagon/aguara-mcp (active, first published 2026-02-26)
- packages
- mcpb:https://github.com/garagon/aguara-mcp/releases/download/v0.2.0/aguara-mcp.mcpb
06 · Aguara MCP FAQ
Is Aguara MCP still maintained?
Yes - as of 2026-09-18, its last commit was 2026-07-01 and it shipped 1 release in the last 90 days. We re-verify nightly.
What can Aguara MCP do?
An agent gets 5 documented tools across scan, check, read & search, including scan_content, check_mcp_config, list_rules, explain_rule.
07 · Alternatives to Aguara MCP
Alternatives to Aguara MCP
Maintained security servers if Aguara MCP isn't the fit.
- Treg To OpenRouter for tools and data. Compare catalog providers and call them from one hosted MCP endpoint. ★ 1,627 · 2026-09-18
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,105 · 2026-09-16
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 652 · 2026-09-17
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 625 · 2026-09-18
- Decionis CommerceGate MCP Commerce preflights, D365 authorization, signed evidence, and reports; no marketplace or ERP writes. ★ 533 · 2026-09-18
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 353 · 2026-09-15
Pairs well with
Servers that cover what Aguara MCP doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Safety Warden · Modal Server · Mcpm · Securedact MCP · Bastion (gowthaman90)
More Go MCP servers · Ratatosk MCP · Cashpilot MCP · Duplicacy MCP · Genieacs MCP · Lynxprompt MCP · see all