Covenant Guard MCP Server

by opencovenant Your server? Claim it

local only

Covenant Guard runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 14 Sep 2026.

Hard spend cap, OS sandbox, and signed receipts for unattended coding agents like Claude Code.

—

Installs / week

not published

Stars

9 open issues

14 Sep 2026

Last commit

from GitHub

Apache-2.0

License

Rust

What the code does

We read the source, 19 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

A line of code looks encrypted services/indexer/src/verified.rs:474

            r#"{"type":"covenant_endpoint_attestation_v1","url":"https://example.com/x402/foo","network":"solana","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","payTo":"ZAU64eKWAgiGNux8bzvgRn8RvWqFhdMVrpJytF7V1qm","checks":{"live":true,"validX402Challenge":true},"source"…

Runs an external command services/covenant-trust-mcp/test-client.mjs:151, apps/desk/src/surfaces/cli/index.ts:568, services/coding-gateway/src/types.ts:159

const child = spawn(process.execPath, ['dist/server.js'], {

Executes code built at runtime services/proof-gen/src/rate-limit.ts:44

    const raw = (await deps.connection.eval(

Sends data to a third-party sink agent-os/crates/covenantd/src/robinhood.rs:301

        let url = format!("https://api.telegram.org/bot{}/sendMessage", self.token);

Touches key and credential files agent-os/crates/covenantd/src/main.rs:1345

     **/id_rsa*\n\

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Alternatives to Covenant Guard

same job, measured the same way

Protect MCP

by tomjwxf

Signed receipts and Cedar policies for AI agent tool calls. Claude Code hooks, MCP gateway.

2 489 installs/wk local only

Cool Workflow

by coo1white

Signed, cited, replayable workflows for Claude, Codex, Gemini, DeepSeek, and other agents.

124 installs/wk local only

Sirro

by jonathanmberg

Shared memory for AI coding agents. Save once, reuse from Cursor, Claude Code, Codex.

answering

Occasio

by occasiolabs

Tamper-evident, Sigstore-signed audit trail for Claude Code agents.

77 installs/wk local only

Claude Bridge

by constripacity

Durable local-first MCP relay for independent coding agents.

297 installs/wk local only

Sms Florin MCP

by flovoice53-tech

Rent a real UK phone number and receive SMS/OTP codes — built for AI coding agents.

35 installs/wk local only

Kage

by kage-core

Verified memory for coding agents: claims cited against code, stale withheld, savings receipts.

216 installs/wk local only

Agent Release Auditor

by veyndrasystems

Deterministic release gate for AI-written code and coding agents.

27 installs/wk local only

Covenant Guard — questions

Answers built from our own checks of this server.

Why is there no uptime for Covenant Guard?

Covenant Guard runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is Covenant Guard open source?

Yes — it is published under the Apache-2.0 licence, written in Rust, 8 stars on GitHub and 9 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.