Aguara MCP

Overview

Aguara MCP is a Model Context Protocol server that scans skills, MCP configs, and agent content for injection and supply-chain risks. It operates offline without requiring an LLM, making it a lightweight security tool for AI development workflows. By exposing its scanning capabilities through MCP, AI assistants can call Aguara as a set of tools rather than requiring manual work between applications.

The server runs locally via Docker using the image ghcr.io/garagon/mcp-aguara:0.8.0 and requires no authentication to get started. It communicates over stdio on your machine, making it easy to integrate into existing setups. Version 0.8.0 is available under the MIT license with source code at garagon/mcp-aguara on GitHub.

Aguara MCP is listed in the AI & Agents category and works with any MCP client including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain this server, claim this listing to earn the Verified badge and keep information current.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "aguara_mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/garagon/mcp-aguara:0.8.0"
      ]
    }
  }
}