All servers · AI models & agents · Monitoring & logs

agentguard — policy proxy for agent tool calls

io.github.agentwares/agentguard-cloud · v0.2.0

Measured by MCP Station

Description written by the publisher, not verified

Free spend report from an agent log, no key. Hosted proxies: caps, audit export, buy calls.

Connect

claude mcp add --transport http agentguard-cloud https://agentwares-agentguard.vercel.app/api/mcp

{
  "mcpServers": {
    "agentguard-cloud": {
      "url": "https://agentwares-agentguard.vercel.app/api/mcp"
    }
  }
}

Tools as reported by the server

• okgate_get_pricing
  Machine-readable pricing for okgate hosted: bands (Starter/Pro/Team) with included tool calls per month, the 80% soft alert and 150% hard stop, features, the free trial allowance, `per_call` — buying tool calls outright at POST /api/v1/calls from a prepaid balance, which is the one purchase here an
• okgate_spend_report
  Read an agent log and report what it spent: totals, calls by tool and by class, estimated dollars by rail, loops, the largest single run, and — for every overspend — the okgate band whose cap would have stopped it, the exact cap, and the call that would have tripped it. Needs no account and no key.
• okgate_create_proxy
  Create a hosted okgate proxy in front of an MCP server. Returns the proxy id, the per-customer MCP URL and the proxy key (shown once). Point your agent's MCP client at the URL with `Authorization: Bearer <key>`. Requires an account key.
• okgate_set_policy write/delete
  Replace a proxy's policy (YAML: mode, upstreams, classify, caps, loop, dry_run, approvals, alerts, chaos, drift). Validated before saving; takes effect within 30 seconds. Requires an account key.
• okgate_get_run
  The incident-shaped report for one run: counts (calls, reads, writes, faked, blocked, spend), the call timeline with decisions, dry-run mutations (what would have changed), ledger entries and the audit-chain verification. Requires an account key.
• okgate_export_audit
  Export a run's hash-chained audit entries (prev_hash, hash, redacted args) with the Merkle root, for disputes and questionnaires. Verify offline with sha256(prev_hash + canonical(entry)). Requires an account key.
• okgate_recommend_allowlist
  Least-privilege recommendation from the proxy's recorded calls: the minimal tool allowlist, argument keys used per tool, and the upstream tools never used (remove them first). No LLM call here; apply it in the dashboard. Requires an account key.

Repository · Website · JSON · Text for agents · Registry updated 2026-09-14