Agentguard

io.tooloracle由 tooloracle.io 发布v1.0.0更新于 Nov 2, 2026

AgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.

发布方自己的服务：Accessoracle

已验证Streamable HTTP可网页运行金融安全与监控

概览

AI 生成的概览

AgentGuard 是一个远程 MCP 安全层，让助手在执行工具调用前做策略预检、风险评分、支付与密钥检查，并写入签名审计日志。

可以做什么
  • 对计划中的工具调用执行策略预检与风险评分，返回允许、拒绝、需审批或标记
  • 在涉及资金的操做前检查支付策略、消费限额、速率限制与重放指纹
  • 扫描载荷与参数中的密钥、提示注入、SQL/XSS/Shell 注入等不安全模式
  • 校验会话、角色与权限范围，并应用多租户治理规则
  • 写入与查询带签名的审计记录、解释决策结果、查询实体威胁情报
适用场景
当助手会自主执行或涉及资金的工具调用，且你需要策略闸门、风险评分和可防篡改的审计记录时适用，尤其适合受监管、多租户或代理商务场景。
运行要求
需要一个远程 streamable HTTP 端点，可通过 mcp-remote 桥接（Node.js/npx）或直接 HTTP 连接访问；未声明任何 API 密钥或环境变量。需要能访问服务商主机的网络。
安装前请注意
工具参数会被发送到第三方服务扫描，载荷中的密钥、私钥和支付信息会离开本机；审计日志由服务端写入和保存。除非客户端真正强制执行，决策只是建议性的；内置策略、租户与限额均为服务商默认值，应自行复核。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Agentguard，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.tooloracle%2Fagentguard/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "agentguard": {
      "type": "http",
      "url": "https://feedoracle.io/guard-oracle/mcp/"
    }
  }
}

README

🛡️ AgentGuard MCP

Security, Policy & Audit Layer for AI Agent Tool Execution — 20 tools | Part of FeedOracle & ToolOracle

[Tools] [Status] [Backend] [Tier]

AgentGuard is the governance and security layer for AI agent workflows. Before any tool executes, AgentGuard evaluates policies, scores risk, detects secrets and injection attempts, logs to a tamper-evident audit trail, and explains every decision. Built for regulated environments, autonomous payments, and enterprise AI agent deployments.

Quick Connect

bash
# FeedOracle (compliance-focused)npx -y mcp-remote https://feedoracle.io/guard/mcp/
# ToolOracle (agent-commerce focused)npx -y mcp-remote https://tooloracle.io/guard/mcp/
json
{  "mcpServers": {    "agentguard": {      "command": "npx",      "args": ["-y", "mcp-remote", "https://feedoracle.io/guard/mcp/"]    }  }}

How It Works — The Agent Security Loop

Agent wants to call: payment_execute({amount: 5000})         │         ▼   policy_preflight()         ← Check before execution         │   risk_score: 95             ← Critical   matched: pol-001, pol-002  ← Payment + High-risk policies   decision: require_approval ← Human gate triggered         │   approval_required()        ← Register pending approval         │   [Human approves]         │   tool executes         │   audit_log_write()          ← Record outcome with signature         │   decision_explain()         ← Exportable compliance evidence

Tools — Welle 1: Core Security (7)

ToolDescription
policy_preflightPre-flight check before any tool call. Evaluates 7 policies, computes risk score, detects threats, auto-logs. Returns allowed/denied/require_approval/flagged.
tool_risk_score0-100 risk score for tool + input. Detects secrets (API keys, passwords), prompt injection, high-value amounts. eth_gas→5, payment_execute→95+.
approval_requiredCheck if tool needs human approval. Optionally registers a pending approval request with tracking URL.
audit_log_writeWrite tool execution to persistent, cryptographically-signed audit log (SQLite WAL). Call after execution to record outcome.
audit_log_queryQuery audit trail. Filter by agent, tool, decision, time range. Paginated. Returns signed entries for tamper verification.
decision_explainHuman-readable explanation of any allow/deny decision. Pass request_id for stored entry or tool_name + tool_args for fresh analysis.
rate_limit_checkCheck agent rate limits: 200/min, 5000/hr, 50000/day. Returns per-window usage with percentage.

Tools — Welle 2: Payment Controls & Safety

ToolDescription
payment_policy_checkValidate payment against policy: amount limits (>100k warns, >1M blocks), recipient denylist, supported currencies/networks, AML thresholds (>10k fiat flagged), MiCA flags.
spend_limit_checkCheck per-call/hour/day spend limits by trust level. Default: 10k/call, 50k/hr, 200k/day. Trusted: 100k/call, 500k/hr, 2M/day.
secret_exposure_checkDeep scan for 19 secret patterns: OpenAI/GitHub/AWS/Slack keys, Bearer/Basic auth, ETH private keys, Bitcoin WIF, credit cards, SSNs, emails. Returns severity + remediation.
payload_safety_check18-pattern safety scan: prompt injection, jailbreak/DAN, role hijacking, SQL (UNION/DROP/OR 1=1), XSS, Python/JS/Shell injection, path traversal, null bytes, oversized payloads.
replay_guard_checkDetect replay attacks via SHA256 fingerprint (agent+tool+args). Configurable window (default 5 min). Returns duplicate count + first/last seen.

Tools — Welle 3: Governance & Threat Intelligence (5)

ToolDescription
cross_tool_anomaly_checkDetect anomalous patterns: risky combos (wallet-recon→transfer, AML→payment), high frequency, repeated denials (policy probing), broad reconnaissance, elevated avg risk score.
scope_checkRole-based scope control. Roles: admin, compliance_officer, trader, auditor, developer, readonly. Returns has_scope, missing scope, granting roles. Logs denials.
session_validateFull session lifecycle: create (TTL + call budget), validate (increment counter), invalidate, info. Sessions carry role, scopes, tenant, expiry.
tenant_policy_checkMulti-tenant governance. Built-in tenants: default, fintech_eu (MiCA/DORA/AMLD6), defi_protocol, enterprise_read. Per-tenant blocklists, risk limits, spend caps.
threat_intel_checkEntity threat intelligence. Auto-detects ETH addresses, IPs, domains. Checks sanctions (Tornado Cash, mixers), disposable services, behavioral analysis from audit log.

Built-in Tenants

TenantMax RiskSpend/DayFrameworks
default70100,000—
fintech_eu60500,000MiCA, DORA, AMLD6
defi_protocol8010,000,000MiCA
enterprise_read300—

Built-in Roles & Scopes

RoleScopes
adminAll scopes
compliance_officeraudit:read, compliance:read, blockchain:read, security:scan
traderblockchain:read, payment:check, payment:execute, audit:read
auditoraudit:read, audit:write, compliance:read, monitor:read
developerblockchain:read, security:scan, audit:read, monitor:read
readonlyblockchain:read, audit:read

Built-in Policies (7 Default)

PolicyConditionAction
pol-001Payment/transfer toolsrequire_approval
pol-002Risk score ≥ 80require_approval
pol-003Secret/key in payloaddeny
pol-004Rate limit exceededflag
pol-005Risk score ≤ 20allow freely
pol-006Prompt injection detecteddeny
pol-007Same tool > 50 calls/60sflag

Risk Score Guide

ScoreLevelAction
0-14MinimalProceed freely
15-39LowProceed, log for audit
40-69MediumFlag and proceed with caution
70-89HighRequire human approval
90-100CriticalBlock execution

Use Cases

  • Regulated AI Workflows: MiCA/DORA compliance requires audit trails — AgentGuard provides them automatically
  • Autonomous Payments: x402 agent payments run through approval_required gate before execution
  • Multi-tenant Platforms: Rate limiting and policy scoping per agent/session
  • Security Monitoring: Real-time detection of prompt injection and secret exposure in tool arguments
  • Compliance Reporting: Export audit log with cryptographic signatures for regulatory review

Backend: SQLite WAL-Mode

Persistent, stable, no daemon required. WAL-mode supports 1000+ writes/second. Shared between feedoracle.io and tooloracle.io — one source of truth.

Links

  • 🛡️ FeedOracle: https://feedoracle.io/guard/mcp/
  • 🔧 ToolOracle: https://tooloracle.io/guard/mcp/
  • 📚 Docs: feedoracle.io
  • 🏠 Platform: tooloracle.io

Built by FeedOracle — Evidence by Design

来源：README.md，提交 9cd9bd6

工具

0
SourceWeft 尚未读取此服务器的工具。

版本历史

1
  1. v1.0.0最新Sep 16, 2026

评分

已满足适用检查项的 75%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。

其他 Tooloracle 集成

Accessoracle

io.tooloracle官方发布者

AccessOracle 是一个远程 MCP 服务器，提供 10 个工具，用于跟踪 IAM 与特权访问合规，包括 MFA 覆盖、访问复审、职责分离冲突等。

Streamable HTTP可网页运行
安全与监控10 个工具Oct 24, 2026

Zkevidenceoracle

io.tooloracle官方发布者

一个远程 MCP 服务器，提供 14 个用于合规证据的零知识证明工具，包括 Groth16 和 PLONK。

Streamable HTTP可网页运行
安全与监控尚未收录Oct 24, 2026

Yieldoracle

io.tooloracle官方发布者

远程 DeFi 收益情报服务器，让助手访问包含风险调整后 APY 与 RWA 收益数据的大型矿池数据集。

Streamable HTTP可网页运行
金融尚未收录Oct 24, 2026

Trustlayer

io.tooloracle官方发布者

一个远程 MCP 服务器，提供十个跨服务器信任工具，用于签名、锚定和验证。

Streamable HTTP可网页运行
安全与监控尚未收录Oct 24, 2026

Tonoracle

io.tooloracle官方发布者

远程 MCP 服务器，为助手提供 11 个只读 TON 区块链工具，涵盖代币、钱包、DeFi 收益、协议、稳定币、跨链桥和网络统计。

Streamable HTTP可网页运行
金融尚未收录Oct 24, 2026