Security gateway and verification layer for MCP agents.
Security gateway and verification layer for MCP agents.
McpVanguard sits between an AI agent and an MCP server, normalizes and inspects tool traffic in real time, and enforces a layered policy before sensitive calls reach the underlying tool. It runs locally in front of stdio servers or as a hosted gateway over SSE and Streamable HTTP.
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| cross | server isolation and server_id traceability |
| signed | manifest, provenance, detached signature, and Sigstore-backed trust verification |
| disabled | no native management tools are exposed |
| same_session_dev | local/dev only; read and mutating tools share the governed MCP session and startup prints a warning |
| operator_only | read-only tools may be visible, but mutating tools require an admin role or vanguard:admin / scope:admin scope |
{
"mcpServers": {
"mcpvanguard": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-filesystem"],
"env": {
"VANGUARD_API_KEY": "your-value",
"VANGUARD_SEMANTIC_CUSTOM_KEY": "your-value",
"VANGUARD_OPENAI_API_KEY": "your-value",
"VANGUARD_OLLAMA_URL": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| VANGUARD_API_KEY | Credential the server authenticates with. | Yes |
| VANGUARD_SEMANTIC_CUSTOM_KEY | Credential the server authenticates with. | Yes |
| VANGUARD_OPENAI_API_KEY | Credential the server authenticates with. | Yes |
| VANGUARD_OLLAMA_URL | Endpoint or connection string the server talks to. | Yes |
Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Search and read your Drive — Docs, Sheets and files become context your assistant can actually use.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Build a programmable telecommunications stack for connecting telephony services with the Internet via a cloud-based utility.
Chat with your second brain — search, read and write vault notes through the Local REST API.
Manage Proxmox hypervisors through a Model Context Protocol server, providing a clean interface for nodes, VMs, and containers.