How do I install Agent Runtime Guard?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Agent Runtime Guard need an API key?

No required environment variable is listed on this record.

What transport does Agent Runtime Guard use?

Agent Runtime Guard runs locally over stdio.

When was Agent Runtime Guard last checked?

Last checked 2026-11-09. Agent 运行时全栈拦截: allow/deny tool calls, Ed25519 receipts, blocks RCE, theft, SSRF, injection. stdio.

Agent Runtime Guard MCP server

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Local command

npx -y [email protected]

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1claude mcp add io.github.dshcorrectover-agent-runtime-guard -- npx -y agent-runtime-guard@1.0.0

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.dshcorrectover-agent-runtime-guard": {4      "command": "npx",5      "args": [6        "-y",7        "[email protected]"8      ]9    }10  }11}

claude_desktop_config.json

Local · npmPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
Version: 1.0.0
Last checked

From the publisher

Documentation

Agent Runtime Guard · Agent 运行时全栈拦截

给 AI Agent 配一个运行时保安：它删库、偷密钥、闯内网、被注入诱导——当场拦下。 它是一道运行时拦截层，不是事后审计工具：危险动作在执行点就被挡住；每张 Ed25519 签名收据，都是拦截/放行时当场附带的裁决凭证。

场景	怎么用
MCP 客户端（Claude Code、Cursor、Cline、Windsurf）	配置上面的 `mcpServers`，工具调用先过保安
DeepSeek Harness	`dsh plugin add agent-runtime-guard`，默认 bundle patch 自动启用，住进 `tools/pre-execute` / `post-execute`
网络边界独立拦一道	用透明 stdio 代理 `agent-runtime-proxy` 包住目标 MCP server，不信宿主内任何插件

Tool	用途
`verify_tool_call`	7 维运行时验证 + 语义攻击链分析 + 数值溢出检测，默认拦截
`issue_evidence`	出具防篡改证据（`content_hash` + `evidence_hash`，可链），放行和拦截都产生
`audit_mcp_config`	审计 MCP 配置的安全风险
`verify_intent_binding`	校验实际参数与声明意图是否一致——零容忍、零 LLM，抓跨模型参数漂移（规划写 `amount:100`，执行写成 `amount:10000` → 拦截）
`verify_receipt`	离线校验 Ed25519 收据签名、检测篡改，可固定可信签名者

Add this server

Host a copy with our keys and logs.

Server facts

Documentation

Agent Runtime Guard · Agent 运行时全栈拦截

⚡ 30 秒跑起来

三种用法

它拦什么

Tools

证据链

FAQ（给 AI Agent 配运行时保安，常见疑问）

🇨🇳 免费验证之外 · 支付宝 SkillPay

协议背景

Links

License

Agent Runtime Guard

Tools

Questions

How do I install Agent Runtime Guard?

Does Agent Runtime Guard need an API key?

What transport does Agent Runtime Guard use?

When was Agent Runtime Guard last checked?