XGuard — Agent Execution Gateway is listed as active in the registry but did not answer our last check. It exposes 8 tools. Last commit 8 Oct 2026.
Scoped agent execution. Server-side credentials, policy, budgets and verifiable receipts.
What changed 90
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 27 August 2026. No other catalogue keeps this.
What the code does
We read the source, 7 d ago · tools taken from the live server · rules ccca72095570
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
for (const script of document.querySelectorAll("script")) { assert.doesNotThrow(() => new Function(script.textContent)); assert.ok(script.getAttribute("nonce")); }
const LOGO_PNG_BASE64 = "iVBORw0KGgoAAAANSUhEUgAAAZAAAAGQCAYAAACAvzbMAAAMe0lEQVR42u3dwU0kS7Cw0QaNhFjQPowXYwJGYAZbJCS2mIERmIAX+NAOMKvZ0IO6uyqzMiPinN2TnvT/tyorvgz6Xr2rm9u7rx0AXOjaIwBAQAAQEAAEBAABAQABAUBAABAQAAQEAAEBAAEBQEAAEBAABAQAAQEAAQFAQAAQEAAEBAABAQABAUBAABAQAAQEAAEBAAEBQEAAEBA…
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.
claude mcp add xguard-control-plane --transport http https://api.xguardgate.com/mcp{
"mcpServers": {
"xguard-control-plane": {
"url": "https://api.xguardgate.com/mcp"
}
}
}[mcp_servers.xguard-control-plane]
url = "https://api.xguardgate.com/mcp"{
"mcpServers": {
"xguard-control-plane": {
"url": "https://api.xguardgate.com/mcp"
}
}
}{
"mcpServers": {
"xguard-control-plane": {
"url": "https://api.xguardgate.com/mcp"
}
}
}Available tools 8
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
xguard_discover
xguard_execute
xguard_get_result
xguard_preflight
xguard_quote
xguard_secretless_call
xguard_status
xguard_verify_receipt
Tools removed
Tools this server used to expose. Anything built against them stopped working on the day they went.
xguard_action_rail
xguard.capabilities
xguard_discovery_search
xguard_egress_fetch
xguard_facilitator
xguard_health
xguard_inspect
xguard_integration
xguard.preflight
xguard.pricing.quote
xguard_proofrail
xguard_protocols
xguard_receipt
xguard_route
xguard_safety_test
xguard_secretless_egress
xguard_supported
xguard_verify_proof
xguard.web.fetch
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://api.xguardgate.com/mcp | streamable-http | answering | 302 ms | 11 min ago |
Alternatives to XGuard — Agent Execution Gateway
same job, measured the same wayMCP server for mandates, delegation, policy-gated execution, credential grants, and audit.
Supervised API-write gateway for AI agents with policy, human approval and execution receipts.
Pre-execution policy gate for consequential agent actions with durable trust receipts.
Ed25519-signed receipts for every AI agent action. Local-first, verifiable, no server required.
Governance layer for agentic AI — signed, verifiable receipts for every agent action.
Credential broker for AI agents: scoped, revocable API access with policy enforcement and audit.
Policy-gated agent spend with signed receipts and rail-extract audit
Public read-only MCP server for HODLXXI agent identity, trust, receipts, and verification.
XGuard — Agent Execution Gateway — questions
Answers built from our own checks of this server.