Aguara MCP Server

Security scanner for AI agent skills and MCP servers

Local serverstdioPython

What is the Aguara MCP Server?

Security scanner for AI agent skills and MCP servers

What it actually does

Local security checks for AI agents before they trust third-party tools.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
scan_contentScan text for security threats before acting on it. Works on agent skills, READMEs, tool definitions, MCP server descriptions, prompts, package manifest content (package.json), GitHub Actions workflow YAML when the filen
check_mcp_configCheck an MCP server configuration (JSON) for security issues before adding it to a client. Detects dangerous command shapes in command/args, credential exposure in env, unsafe argument injection, and tool-poisoning patte
list_rulesBrowse the cataloged security rules. Returns 250 detections (193 YAML pattern rules + 57 analyzer-emitted rules from ci-trust, pkgmeta, jsrisk, pyrisk, rsbuild, npm-policy, pnpm-policy, agent-policy, NLP, toxic-flow, and
explain_ruleGet detailed information about a specific rule by ID. Resolves both YAML rules (returns patterns plus true/false-positive examples) and analyzer-emitted rule IDs from ci-trust, pkgmeta, jsrisk, pyrisk, rsbuild, npm-polic
discover_mcpDiscover MCP server configurations on the local machine by reading known MCP client config files (Claude Desktop, Cursor, VS Code, Windsurf, and others). Returns the server definitions including commands, arguments, and

Example prompts to try

  • “Use Aguara MCP to scan content.”
  • “Use Aguara MCP to check mcp config.”
  • “Use Aguara MCP to list rules.”

Frequently asked questions

Security scanner for AI agent skills and MCP servers Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.