SECRET4422/guardrail-mcp

Hybrid multi-language security analysis over MCP for AI-assisted workflows.
GuardRail exposes tools that scan source and infrastructure text for high-signal issues (secrets, dangerous APIs, injection patterns, IaC misconfigurations), with optional tree-sitter structural checks, dependency inventory/OSV, SARIF/SBOM export, and an enterprise policy gateway.
| Resource | URL |
| Website | https://secret4422.github.io/guardrail-mcp/ |
| AlphaTech Studio | https://alphatech.studio |
| MCPize listing | https://mcpize.com/mcp/guardrail |
| Accuracy policy | docs/ACCURACY.md |
| Security / threat model | docs/SECURITYMODEL.md |
| Examples | docs/EXAMPLES.md |
| Performance | docs/PERFORMANCE.md |
| Test results | docs/test-results.md |
| Enterprise | docs/ENTERPRISE.md |
## Scope (read this)
Does: static analysis of text you provide; redacts many secret-shaped substrings in excerpts.
Does not: execute scanned code; replace commercial SAST/DAST; guarantee zero false positives/negatives; provide SOC2 certification by itself.
Website playground: browser-only demonstration (docs/ACCURACY.md). Production use = Python MCP/CLI.
## Quick start
### Option 1: Fast run with uvx (zero installation)
bash
uvx --from git+https://github.com/SECRET4422/guardrail-mcp.git guardrail-mcp
### Option 2: Clone and install editable (Cross-platform: Windows, macOS, Linux)
bash
git clone https://github.com/SECRET4422/guardrail-mcp.git
cd guardrail-mcp
pip install -e .
# Run test suite
python -m unittest discover -s tests -v
# Start MCP stdio server
guardrail-mcp
### MCP client configuration
Add GuardRail to your Claude Desktop or Cursor configuration (claudedesktopconfig.json):
json
"mcpServers": {
"guardrail": {
"command": "guardrail-mcp",
"args": ["serve", "--mode", "stdio"]
Or when running via direct Python executable in a local virtual environment:
json
"mcpServers": {
"guardrail": {
"command": "python",
"args": ["-m", "guardrail.server", "serve", "--mode", "stdio"],
"cwd": "/absolute/path/to/guardrail-mcp"
### CLI scan (ground truth)
bash
python - <<'PY'
from pathlib import Path
from guardrail.hybridscan import hybridscan
r = hybridscan(
Path("examples/vulnerablesample.py").readtext(encoding="utf-8"),
filename="examples/vulnerablesample.py",
print(r["status"], r["securityverdict"], r["issuecount"], r.get("engines"))
PY
examples/ contains intentional insecure fixtures for tests and demos only (labeled in-file). Values are synthetic.
## Capabilities
| Area | Implementation |
| Secrets / high-signal patterns | rules.py, language grids |
| Python AST + multi-hop taint | astengine.py, taint.py |
| Tree-sitter (optional grammars) | treesitterengine.py |
| Repo / git-diff scan | reposcan.py, gitscan.py |
| Dependencies / OSV | deps.py (network optional) |