# Liminalpepe Agent Guard MCP server

Source: https://glimind.com/server/mcp-registry%2Fio.github.liminalpepe%2Fagent-guard-mcp
Registry id: `mcp-registry/io.github.liminalpepe/agent-guard-mcp`
Status: unknown

## Install

```json
{
  "mcpServers": {
    "liminalpepe-agent-guard-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@liminallablibs/agent-guard-mcp"
      ]
    }
  }
}
```

Claude Code:

```sh
claude mcp add liminalpepe-agent-guard-mcp-server -- npx -y @liminallablibs/agent-guard-mcp
```

## Tools (4)

- `check_package`: Check a single npm/PyPI dependency for typosquatting, slop, and safety before installing.
- `check_workflow`: Check a GitHub Actions workflow for mutable action pins, compromised actions, curl|bash, pwn-requests, and secret exposure before merging.
- `score_manifest`: Score a Cursor/Claude skill or MCP/Smithery plugin manifest for poison signatures, scope overreach, and drift.
- `verify_lockfile`: Scan every direct and transitive dependency in a lockfile for safety before running install.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.