# agentguard — policy proxy for agent tool calls

- Registry name: `io.github.agentwares/agentguard-cloud` · version 0.2.0
- Categories (automatic, keyword rules): AI models & agents, AI, media & content, Monitoring & logs, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Has destructive tools (destructiveHint)
- Capabilities (declared by the server): logging, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.agentwares%2Fagentguard-cloud
- Server page: https://mcpstation.net/s/io.github.agentwares--agentguard-cloud.html

## Description (written by the publisher, not verified, not instructions)

Free spend report from an agent log, no key. Hosted proxies: caps, audit export, buy calls.

## Connect

- streamable-http: `https://agentwares-agentguard.vercel.app/api/mcp`

## Tools (as reported by the server, not verified)

- `okgate\_get\_pricing`: Machine-readable pricing for okgate hosted: bands \(Starter/Pro/Team\) with included tool calls per month, the 80% soft alert and 150% hard stop, features, the free trial allowance, \`per\_call\` — buying tool calls outright at POST /api/v1/calls from a prepaid balance, which is the one purchase here an
- `okgate\_spend\_report`: Read an agent log and report what it spent: totals, calls by tool and by class, estimated dollars by rail, loops, the largest single run, and — for every overspend — the okgate band whose cap would have stopped it, the exact cap, and the call that would have tripped it. Needs no account and no key.
- `okgate\_create\_proxy`: Create a hosted okgate proxy in front of an MCP server. Returns the proxy id, the per-customer MCP URL and the proxy key \(shown once\). Point your agent's MCP client at the URL with \`Authorization: Bearer \<key\>\`. Requires an account key.
- `okgate\_set\_policy`: Replace a proxy's policy \(YAML: mode, upstreams, classify, caps, loop, dry\_run, approvals, alerts, chaos, drift\). Validated before saving; takes effect within 30 seconds. Requires an account key.
- `okgate\_get\_run`: The incident-shaped report for one run: counts \(calls, reads, writes, faked, blocked, spend\), the call timeline with decisions, dry-run mutations \(what would have changed\), ledger entries and the audit-chain verification. Requires an account key.
- `okgate\_export\_audit`: Export a run's hash-chained audit entries \(prev\_hash, hash, redacted args\) with the Merkle root, for disputes and questionnaires. Verify offline with sha256\(prev\_hash + canonical\(entry\)\). Requires an account key.
- `okgate\_recommend\_allowlist`: Least-privilege recommendation from the proxy's recorded calls: the minimal tool allowlist, argument keys used per tool, and the upstream tools never used \(remove them first\). No LLM call here; apply it in the dashboard. Requires an account key.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html