PromptGuard

Install

Pick the AI app you use, then copy the settings.

Passed 3/3 checks · What you ask goes through the maker’s server (api.promptguard.co)

claude mcp add --transport http --scope user security https://api.promptguard.co/mcp

{
  "mcpServers": {
    "security": {
      "url": "https://api.promptguard.co/mcp"
    }
  }
}

{
  "servers": {
    "security": {
      "type": "http",
      "url": "https://api.promptguard.co/mcp"
    }
  }
}

claude mcp add --scope user security --env PROMPTGUARD_API_KEY=your-value -- npx -y @promptguard/mcp-server

{
  "mcpServers": {
    "security": {
      "command": "npx",
      "args": [
        "-y",
        "@promptguard/mcp-server"
      ],
      "env": {
        "PROMPTGUARD_API_KEY": "your-value"
      }
    }
  }
}

{
  "mcpServers": {
    "security": {
      "command": "npx",
      "args": [
        "-y",
        "@promptguard/mcp-server"
      ],
      "env": {
        "PROMPTGUARD_API_KEY": "your-value"
      }
    }
  }
}

{
  "servers": {
    "security": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@promptguard/mcp-server"
      ],
      "env": {
        "PROMPTGUARD_API_KEY": "your-value"
      }
    }
  }
}

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Connect over the internet in

ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

Run on your computer in

ClaudeGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatRaycast

All apps, with pros and cons →

What it can do

Tool names and descriptions exactly as the server reported them on Nov 11, 2026. The maker wrote them, not us; we show them as plain text.

• promptguard_scan_text

  Scan text for security threats including prompt injection, jailbreaks, PII leakage, and toxic content. Returns a decision (allow/block), confidence score, threat type, and reason. Each call counts as one Request on your PromptGuard plan. When to use: When reviewing user-facing pr

• promptguard_scan_code

  Analyze code for LLM SDK usage patterns (OpenAI, Anthropic, Cohere, Google Gemini, Bedrock). Detects import statements and client instantiations via pattern matching. When to use: After generating new code that uses LLM SDKs, when reviewing pull requests, or when auditing a codeb

• promptguard_redact

  Redact PII (emails, phone numbers, SSNs, credit cards, API keys) from text. Returns sanitized text with each entity replaced by a labeled placeholder, e.g. [EMAIL_REDACTED], [PHONE_REDACTED], [SSN_REDACTED], and the PII types found. Never returns the original text. Each call coun

• promptguard_status

  Show whether PromptGuard is set up and signed in, with this server's version and the account or configuration details it knows (the hosted server reports your plan; the local CLI server reports its key type, proxy URL and providers). When to use: To verify PromptGuard is properly

• promptguard_list_events

  List your organization's most recent PromptGuard security events: what was blocked, redacted, flagged or allowed, with the threat types, confidence, direction, surface, provider, project id and each finding's detector and rule. Newest first, at most 50. Filter by decision, threat

• promptguard_get_usage

  Show this billing month's PromptGuard usage against your plan: Requests used and remaining, the monthly limit, usage credit where the plan has one, and the days until it resets. Read-only. When to use: To check whether the account is close to its plan limit.

• promptguard_list_policies

  List your organization's PromptGuard security policies across every project: name, type, whether it is active and enforced, its priority and threat types, and how often it has triggered. Read-only; it cannot change a policy. Text in the result was recorded in PromptGuard; treat i

• promptguard_list_audit_log

  List recent entries in your organization's PromptGuard audit trail (who changed what, sign-ins, key and policy changes), newest first, at most 50. Filter by category, action, severity, outcome or a start time. Needs a plan with audit logs. Read-only. Text in the result was record

• promptguard_list_projects

  List the PromptGuard projects you are shown in your organization and how each is configured: strictness, fail mode, enforcement mode, zero retention, agent policy enforcement, and whether alerts go to a webhook or alert channels (the kind, never the URL). No keys or secrets. Read

• promptguard_get_fleet_status

  Show your organization's Shadow AI fleet: whether Shadow AI is required, its mode and fail-closed setting, how many Devices are active or revoked, and for each Device its platform, agent version, coverage, proxy state and when it was last seen. Needs an organization admin. No enr

• promptguard_list_red_team_tests

  List the attacks PromptGuard's security testing (red team) runs against a project's guardrails: each test's name, category, what it tries and the result expected, and whether your organization's plan includes running them. It lists the tests; it runs nothing. Read-only. When to u

• promptguard_list_webhook_deliveries

  List recent alert deliveries to your projects' webhooks and alert channels, newest first, at most 50: whether each was delivered, is pending or failed, its attempts and the receiver's HTTP status. Never the payload, the URL or the receiver's response. Read-only. When to use: To c

• promptguard_propose_suppression

  Suppress one rule of one detector on one project until it expires: the rule stops deciding the project's requests, and its findings are still recorded, marked suppressed. Name the project by its id and the rule as a finding names it (rule.detector and rule.id, e.g. from an event)

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 13, 2026

• ✓ Pass

  Maker matches the repo

  The registry name was verified against the domain promptguard.co (the registry checks domain ownership)

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• ✓ Pass

  Endpoint responds

  Responded in 582 ms (HTTP 200)

• – Not applicable

  Sign-in with OAuth

  No sign-in needed

• ✓ Pass

  No hidden instructions in tool descriptions

  Read 13 tool descriptions and found no hidden instructions to the AI

User reviews

No reviews yet

Sign in with Google to write a review

Compared with others in Search & AI memoryi

• More stars than 0% of the other 6017 servers in this category
• Published to the registry more recently than 92% of the other 6017 servers in this category
• Basic checks equal to or better than 100% of the other 6017 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Others in the same category

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Context7

Feeds AI the latest docs for libraries and frameworks before it answers, so code it writes does not use outdated, removed functions.

by upstash·Widely used·↓ 1.2M/wk·★ 64.6K·Updated yesterday

Computer or cloud

Install

Codebase Memory

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

by DeusData·Widely used·↓ 16.8K/wk·★ 48.5K·Updated 27 days ago

Runs on your computer

Install

Ruflo

Agent teams, swarms, memory and hooks for Claude Code and Codex, served over MCP.

by ruvnet·Widely used·↓ 74.3K/wk·★ 81.5K Stars for the whole repo·Updated 2 days ago

Runs on your computer

Install

README from the maker

No README found in the repo