Back to MCP Trust Indexm8ven
73
/ 100
19 days ago
glama

GuardRail MCP v2.0 (Enterprise)

GuardRail MCP is an enterprise agent security server that provides multi-language code analysis, dependency scanning, and container security checks, with RBAC, policy packs, and audit logging.

→ SECRET4422/guardrail-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 7 credentials: GUARDRAIL_LLM_API_KEY, GUARDRAIL_JWT_SECRET, GUARDRAIL_ADMIN_API_KEY, GUARDRAIL_DEMO_API_KEY, AWS_SECRET_ACCESS_KEY, DB_PASSWORD, API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretGUARDRAIL_LLM_API_KEY
configGUARDRAIL_LLM_BASE_URL
configGUARDRAIL_LLM_MODEL
configGUARDRAIL_DB_PATH
configGUARDRAIL_AUDIT_LOG
🔐 secretGUARDRAIL_JWT_SECRET
configGUARDRAIL_ENTERPRISE_CONFIG
🔐 secretGUARDRAIL_ADMIN_API_KEY
configGUARDRAIL_ALLOWED_ROOTS
🔐 secretGUARDRAIL_DEMO_API_KEY
configAWS_ACCESS_KEY_ID
🔐 secretAWS_SECRET_ACCESS_KEY
🔐 secretDB_PASSWORD
🔐 secretAPI_KEY
configSLACK_WEBHOOK_URL
configGUARDRAIL_CORS_ORIGINS
configGUARDRAIL_MAX_BODY_BYTES
configGUARDRAIL_DASHBOARD
configGUARDRAIL_RULES_DIR
configGUARDRAIL_CACHE_PATH
configGUARDRAIL_REQUIRE_TENANT
configGUARDRAIL_PLUGIN_PATH
configGUARDRAIL_MAX_SOURCE_BYTES
configGUARDRAIL_MODE
configGUARDRAIL_HOST
configGUARDRAIL_PORT
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/secret4422-guardrail-mcp-1vvt6b)](https://m8ven.ai/mcp/secret4422-guardrail-mcp-1vvt6b)
commit: c0135dd86e04d84e2a547a2c6a6699625512a88b
code hash: b437244674912e1315b1090fbf042ac07b7cfd2af445b66b31ed3f16564d3dec
verified: 7/12/2026, 8:36:49 AM
view raw JSON →