Free read-only MCP server: audit API-key privileges, check idempotency patterns, explain AI-agent guard patterns.

Safe AI Agent — Guard Checks (free MCP server)

A free, read-only MCP server with three diagnostic tools for people who runAI agents in production. Distilled from the Safe AI Agent Pack — theproduction guard modules used by the Sage personal agent and the Growl AImarketing SaaS.

No network calls. No writes. Inputs that look like real secrets are refused.

Tools

Tool What it does
audit_api_keys Flags over-privileged API keys from their permission descriptions (never pass key values — secret-looking entries are rejected, not stored)
check_idempotency_pattern Scans a code snippet for the signals that actually stop duplicate execution: idempotency key, server-side store, uniqueness, short-circuit, payload binding, approval separation
explain_guard_pattern Explains a production guard pattern — the failure it prevents and its minimal shape (idempotency_key, approval_gate, outbox, key_inventory, circuit_breaker, signed_approval_link)

Install & run

git clone <this repo>
cd safe-agent-mcp
python3 -m venv .venv && .venv/bin/pip install -r requirements.txt
.venv/bin/python safe_agent_mcp.py   # stdio transport

Claude Desktop / Cursor MCP config:

{
  "mcpServers": {
    "safe-agent-guard-checks": {
      "command": "/path/to/.venv/bin/python",
      "args": ["/path/to/safe_agent_mcp.py"]
    }
  }
}

Test

.venv/bin/python test_server.py   # in-memory client; calls every tool

The full pack

This free server is the diagnostic front door. The production modules —SQLite idempotency store, @once decorator, approval outbox with HMAC-signedapproval links, the token-privilege inventory script, 18 regression tests andthe 100 production-traps catalog — ship in theSafe AI Agent Pack ($69 / team $199).

License

MIT for this free server. The paid pack has its own commercial license.

Get the kit

MCP Server · Populars

MCP Server · New