agent-guard

Item: agent-guard
Rating: 0
Author: M8ven

Safety checks an agent runs before it acts — flags malicious packages, destructive shell commands, secret leaks, and web-backend holes before execution.

→ ipezygj/agent-guard · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Reads files from sensitive locations

Touches: .ssh/id_ed25519

🚨

Hardcoded credentials detected

2 live-looking API keys in source: 1 GitHub PAT (new), 1 AWS access key

🔐

You'll be asked for 2 credentials: INTERNAL_SECRET, API_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretINTERNAL_SECRET

🔐 secretAPI_TOKEN

configAGENT_GUARD_MCP_HOSTS

configAGENT_GUARD_HTTP

configAGENT_GUARD_ISSUER

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/ipezygj-agent-guard-zbjm1o)](https://m8ven.ai/mcp/ipezygj-agent-guard-zbjm1o)

commit: d98f03f0a71232e3d51e28c1d27535665ce9d66b

code hash: b0b0a74cf06441796f16835af0e0ee4c4ffea8aa3f43c2694031b422fa4eaf35

verified: 7/25/2026, 8:50:24 AM

view raw JSON →