Laraguard Mcp MCP Server

A security audit MCP server for Laravel projects — built with TypeScript and stdio transport.

Local serverstdioMIT

What is the Laraguard Mcp Server?

Laraguard Mcp is an MCP project maintained in the ecr17dev/laraguard-mcp repository. The maintainer describes its purpose as “A security audit MCP server for Laravel projects — built with TypeScript and stdio transport”. Read the project documentation for the complete scope.

Local setup

The project provides a local client configuration using node. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.

Configuration values

The example declares MCP_BASE_PATHS. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
project_info
dependency_audit
config_audit
code_scan
blade_scan
route_audit
attack_simulate
full_audit
PatternSeverity
CheckFile
ProbeMethod & Endpoint
error_disclosureGET /__invalid_route__
sql_injection_loginPOST /login with SQLi payload
reflected_xssGET /search?q= …
csrf_not_enforcedPOST /login without CSRF token
auth_bypassGET /api/user without auth header
rate_limit10× rapid POST /login

How to install the Laraguard Mcp Server

{
  "mcpServers": {
    "laraguard": {
      "command": "node",
      "args": [
        "/absolute/path/to/Laraguard MCP/dist/index.js"
      ],
      "env": {
        "MCP_BASE_PATHS": "/absolute/path/to/your-laravel-project"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

VariableDescriptionRequired
MCP_BASE_PATHSDeclared in the maintainer’s client configuration.Check documentation