GuardRails-MCP MCP Server

by tam-ds Your server? Claim it

local only

GuardRails-MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 241 installs a week from pypi. Last commit 16 Oct 2026.

Local prompt regression tracker with six fictional cases and evidence for human review.

Installs per day peak 241 · avg 8

a month agotoday

241

Installs / week

pypi · guardrails-mcp

Stars

0 open issues

16 Oct 2026

Last commit

from GitHub

MIT

License

Python

Nothing serious here today

Today is the operative word: we check GuardRails-MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add guardrails-mcp -- uvx guardrails-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "guardrails-mcp": {
      "args": [
        "guardrails-mcp"
      ],
      "command": "uvx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.guardrails-mcp]
command = "uvx"
args = ["guardrails-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "guardrails-mcp": {
      "args": [
        "guardrails-mcp"
      ],
      "command": "uvx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "guardrails-mcp": {
      "args": [
        "guardrails-mcp"
      ],
      "command": "uvx"
    }
  }
}

This one needs environment variables set before it will start: GUARDRAILS_DATA_DIR (Absolute writable directory for local evaluation records. Use the same path in CLI and dashboard.). The author declared them in the registry entry; get the values from the project itself.

Alternatives to GuardRails-MCP

same job, measured the same way

Tripwire Guard — evidence-first injection scanner

by kubaopoczka

Local read-only MCP scanner for known prompt-injection patterns with exact evidence and no network.

33 installs/wk local only

Charles Local MCP

by eason0in

Guarded local Charles Proxy automation and bounded XML session evidence

local only

Edgegate MCP

by frozo-ai

Regression-test AI models on real Snapdragon and Jetson hardware, with signed evidence for CI.

65 installs/wk local only

Weavatrix Refactor Js

by sergii-ziborov

Transactional refactoring MCP with 11 evidence-backed tools, hash-bound previews, and rollback.

50 installs/wk local only

Telegram MCP Server

by tolboy

Local-first TDLib Telegram MCP server with 115 tools, account isolation and production guardrails.

local only

KnownFix

by b-hash88

Verified fixes, professional reviews, and evidence-led apparel over MCP.

94 installs/wk 17 tools answering

Neurakeep

by dominiclachance

Local-first, source-cited memory for AI agents with proposal review, failure memory, and MCP tools.

43 installs/wk local only

Weavatrix Refactor

by sergii-ziborov

Transactional refactoring extension with 11 evidence-backed tools, previews, and rollback.

71 installs/wk local only

GuardRails-MCP — questions

Answers built from our own checks of this server.

Why is there no uptime for GuardRails-MCP?

GuardRails-MCP runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package guardrails-mcp was installed 241 times last week.

How do I connect GuardRails-MCP?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls guardrails-mcp straight from pypi; nothing to host, nothing to sign up for.

How many people use GuardRails-MCP?

The pypi package guardrails-mcp was installed 241 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is GuardRails-MCP open source?

Yes — it is published under the MIT licence, written in Python and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.