About io.github.ExpertVagabond/guardrails
io.github.ExpertVagabond/guardrails is an MCP server in the Security category: aI Agent Guardrails MCP server - security layer.
Install
claude mcp add io-github-expertvagabond-guardrails -- npx -y guardrails-mcp-servernpx -y guardrails-mcp-serverThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (6)
check_policyEvaluate a request against security policies (RBAC, resource access, quotas)
Parameters not published.
filter_outputFilter and redact sensitive data (PII, secrets, credentials) from responses
Parameters not published.
get_audit_logsQuery the audit log with filtering by type, user, time range
Parameters not published.
get_statsGet engine statistics including active users, block rate, request counts
Parameters not published.
update_configUpdate guardrail configuration at runtime
Parameters not published.
validate_inputValidate and sanitize incoming requests through all guardrail checks
Parameters not published.
Ask AI
Ask AI about io.github.ExpertVagabond/guardrails
Powered by Claude · Grounded in docs
Security checks
- ✓README presentThe repository ships documentation.
5 checks have not been run yet.
README
guardrails-mcp-server
[!License: MIT](https://opensource.org/licenses/MIT) [!MCP](https://modelcontextprotocol.io) [!Node.js](https://nodejs.org)
MCP server for AI agent security guardrails. Provides input validation, prompt injection detection, PII redaction, output filtering, policy enforcement, rate limiting, and comprehensive audit logging.
Tools
| Tool | Description |
|---|---|
validate_input |
Validate and sanitize incoming requests through all guardrail checks |
filter_output |
Filter and redact sensitive data (PII, secrets, credentials) from responses |
check_policy |
Evaluate a request against security policies (RBAC, resource access, quotas) |
get_audit_logs |
Query the audit log with filtering by type, user, time range |
get_stats |
Get engine statistics including active users, block rate, request counts |
update_config |
Update guardrail configuration at runtime |
Security Features
- Prompt Injection Detection -- 12 regex patterns for jailbreak, DAN mode, system prompt override
- PII Detection and Redaction -- SSN, credit card, email, phone, IP, API keys, AWS keys, JWT, passwords, private keys, connection strings
- Malicious Code Blocking -- eval, exec, subprocess, child_process, shell injection
- Policy Engine -- Block sensitive paths, dangerous tools, unauthenticated destructive ops, URL allowlist, maintenance windows
- Rate Limiting -- Per-user sliding window (configurable requests/minute)
- Audit Logging -- Timestamped events with metrics, log rotation, external handler support
Install
npm install
Configuration
{
"mcpServers": {
"guardrails": {
"type": "stdio",
"command": "node",
"args": ["/path/to/guardrails-mcp-server/index.js"]
}
}
}
Project Structure
src/engine/GuardrailsEngine.js # Core orchestration
src/validators/InputValidator.js # Prompt injection and PII detection
src/filters/OutputFilter.js # Redaction and harmful content blocking
src/policies/PolicyEngine.js # RBAC, quotas, maintenance windows
src/audit/AuditLogger.js # Event logging and metrics
License
README copy captured when this server was indexed; it may lag the repository. The original is authoritative.