agentguard — policy proxy for agent tool calls
io-github-agentwares-agentguard-cloud declares 7 capabilities across 7 tools, with 2 critical issues.
Issues
7 of 7 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.
1 tool is classified as irreversible and declares no limit.
7 of 7 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.
7 of 7 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.
2 tools can modify data and declare no limit.
4 tools can read data and declare no limit.
Declared capabilities
| Tool | Read as | Basis |
|---|---|---|
okgate_get_pricing | read |
declared |
okgate_spend_report | read |
declared |
okgate_create_proxy | write |
inferred |
okgate_set_policy | destructive |
declared |
okgate_get_run | read |
declared |
okgate_export_audit | read |
declared |
okgate_recommend_allowlist | write |
assumed |
Record history
| Recorded | Exposure | Source |
|---|---|---|
| 2026-10-11 | 32 | tools/list on https://agentwares-agentguard.vercel.app/api/mcp, published in the official MCP registry as io.github.agentwares/agentguard-cloud 0.2.0 |
tools/list response and it will be re-scored and dated.
Corrections are published alongside the original, not in place of it.