Firestore Rules Guard

Local MCP server that audits Firestore and Storage security rules files for public access, expired test-mode dates and missing ownership checks.

What you can do

• Audit firestore.rules and storage.rules files for rules that allow public access.
• Flag expired test-mode dates and missing ownership checks in those rule files.
• Report findings back to the assistant so it can explain or fix the rules.
• No individual tools are listed in the manifest, so the exact operations are not documented.

When to use it

Useful when a project keeps Firebase Firestore or Cloud Storage security rules in the repository and you want an assistant to review them before deploying or during a security pass.

Requirements

Runs as a local stdio process on the user's machine, started with npx from the npm package; Node.js and network access for the package download are implied. No authentication, environment variables or headers are declared. Desktop client only.