Aguara MCP
Local security checks for AI agents before they trust third-party tools. Aguara MCP gives Claude Code, Cursor, Windsurf, and any MCP-compatible agent a local tool for reviewing untrusted agent content before acting on it. Its 5 documented tools cluster into scan, check, read & search, explain.
People who need security tools inside Claude, Cursor, VS Code, or another MCP client. The project is written in Go.
VERIFIED ACTIVE
LAST COMMIT 2026-07-01 · ★ 4 · #173 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25
MIT · Go servers · how we verify → /methodology
01 · Install Aguara MCP
Claude Desktop
Settings → Extensions → Install, then select the https://github.com/garagon/aguara-mcp/releases/download/v0.2.0/aguara-mcp.mcpb .mcpb bundle02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as Claude Desktop extension (.mcpb bundle)
license MIT - declared in the repository
registry namespace io.github.garagon is GitHub-verified and matches the repo owner
03 · What Aguara MCP can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
An agent gets 5 documented tools across scan, check, read & search, including scan_content, check_mcp_config, list_rules, explain_rule.
Capability map
Tools grouped from the project's README - what Aguara MCP lets an agent do.
Scan
1 tool - e.g. Scan text for security threats before acting on it. Works on agent skills, READMEs, tool definitions, MCP server descriptions, prompts, package manifest content
scan_content
Check
1 tool - e.g. Check an MCP server configuration (JSON) for security issues before adding it to a client. Detects dangerous command shapes in command/args, credential exposure
check_mcp_config
read & search
1 tool - e.g. Browse the cataloged security rules. Returns 250 detections (193 YAML pattern rules + 57 analyzer-emitted rules from ci-trust, pkgmeta, jsrisk, pyrisk, rsbuild,
list_rules
Explain
1 tool - e.g. Get detailed information about a specific rule by ID. Resolves both YAML rules (returns patterns plus true/false-positive examples) and analyzer-emitted rule ID
explain_rule
Discover
1 tool - e.g. Discover MCP server configurations on the local machine by reading known MCP client config files (Claude Desktop, Cursor, VS Code, Windsurf, and others). Return
discover_mcp
Latest releases
v0.8.0 · 2026-07-01
Aguara MCP v0.8.0 aligns the server with Aguara core v0.27.0: agents now get the full 250-detection catalog, and scan_content gains the npm install-trust surface. This release is also the first one publishable to the…
v0.7.0 · 2026-06-10
Aligns mcp-aguara with Aguara v0.24.0 and unlocks the agent-trust surfaces through scan_content. An agent using this MCP can now vet the riskiest files a cloned repo ships for AI tools before trusting any of them…
v0.6.1 · 2026-05-21
Maintenance release. Aligns mcp-aguara with Aguara v0.18.2 - same five MCP tools, same 219-detection catalog, no schema changes. The relevant pickup from core is the sensitive: true flag on MCPCFG_003 ("Hardcoded…
04 · Who maintains Aguara MCP
Aguara MCP is maintained by garagon. We track 2 MCP servers from garagon - 2 actively maintained, 8 combined GitHub stars, oldest repo from Feb 2026.
05 · Facts
- repository
- github.com/garagon/aguara-mcp
- category
- security - ranked #173 of 182 actively-maintained security servers as of 2026-08-25.
- release cadence
- 2 releases in the last 90 days (latest 2026-07-01)
- registry
- io.github.garagon/aguara-mcp (active, first published 2026-02-26)
- packages
- mcpb:https://github.com/garagon/aguara-mcp/releases/download/v0.2.0/aguara-mcp.mcpb
06 · Aguara MCP FAQ
Is Aguara MCP still maintained?
Yes - as of 2026-08-25, its last commit was 2026-07-01 and it shipped 2 releases in the last 90 days. We re-verify nightly.
What can Aguara MCP do?
An agent gets 5 documented tools across scan, check, read & search, including scan_content, check_mcp_config, list_rules, explain_rule.
07 · Alternatives to Aguara MCP
Alternatives to Aguara MCP
Maintained security servers if Aguara MCP isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- Decionis MCP Server Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. ★ 533 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- Bradesco MCP server for Bradesco - Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS) ★ 269 · 2026-08-12
Pairs well with
Servers that cover what Aguara MCP doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Safety Warden · Mcpm · Bastion (gowthaman90) · Grovs
More Go MCP servers · Ratatosk MCP · Cashpilot MCP · Duplicacy MCP · Genieacs MCP · Lynxprompt MCP · see all