Servidor MCP

XGuard — Agent Execution Gateway

io.github.moelayyan90/xguard-control-plane
Infraestructura MCP y de agentes Seguridad Público y accesible MCP 2026-07-28

Qué hace este MCP

Provides policy-controlled agent execution with scoped capabilities, credential injection, budgets, and verifiable receipts.

xguard_discover
Find the paid API catalog and buying instructions, plus explicit provider operations and input schemas.
Solo lectura Idempotente
Esquema de entrada
{'type': 'object', 'properties': {}, 'additionalProperties': False}
xguard_execute
Execute an explicit scoped provider operation, or a supported public-source outcome. intent:demo is free. Never infer a mutation from ambiguous text.
Destructivo Acceso externo
Esquema de entrada
{'type': 'object', 'properties': {'input': {'type': 'object'}, 'intent': {'type': ['string', 'object']}, 'operation': {'type': 'string'}, 'capability': {'type': 'string'}, 'idempotency_key': {'type': 'string'}}, 'additionalProperties': True}
xguard_get_result
Recover a paid public outcome with its payment identifier and original signed quote without execution or another payment.
Solo lectura Idempotente
Esquema de entrada
{'type': 'object', 'required': ['payment_identifier', 'quote'], 'properties': {'quote': {'type': 'string'}, 'payment_identifier': {'type': 'string'}}, 'additionalProperties': False}
xguard_preflight
Inspect validation, scope and remaining capability budget without reserving, billing or executing. Execution rechecks everything.
Solo lectura Idempotente
Esquema de entrada
{'type': 'object', 'properties': {'input': {'type': 'object'}, 'intent': {'type': ['string', 'object']}, 'operation': {'type': 'string'}, 'capability': {'type': 'string'}, 'idempotency_key': {'type': 'string'}}, 'additionalProperties': True}
xguard_quote
Inspect XGuard credit pricing for a capability, or obtain a signed x402 quote for a public outcome. Does not execute.
Solo lectura Idempotente
Esquema de entrada
{'type': 'object', 'properties': {'input': {'type': 'object'}, 'intent': {'type': ['string', 'object']}, 'operation': {'type': 'string'}, 'capability': {'type': 'string'}, 'idempotency_key': {'type': 'string'}}, 'additionalProperties': True}
xguard_secretless_call
Call an allowed provider operation with a capability. Enforces scope, call/credit budget and billing before server-side credential injection. Writes require idempotency_key.
Destructivo Acceso externo
Esquema de entrada
{'type': 'object', 'anyOf': [{'required': ['operation', 'input']}, {'required': ['target']}], 'required': ['capability'], 'properties': {'input': {'type': 'object'}, 'method': {'enum': ['GET', 'HEAD', 'POST', 'PUT', 'PATCH', 'DELETE'], 'type': 'string'}, 'target': {'type': 'string', 'format': 'uri'}, 'body_json': {}, 'operation': {'enum': ['github.repository.read', 'github.issue.create', 'github.issue.comment', 'github.pull_request.create', 'cloudflare.zone.read', 'cloudflare.worker.metadata', 'slack.channel.read', 'slack.message.send', 'notion.page.read', 'notion.database.read', 'notion.page.create', 'notion.page.update', 'openai.response.create', 'anthropic.message.create', 'gemini.content.generate', 'stripe.customer.read'], 'type': 'string'}, 'capability': {'type': 'string', 'description': 'Scoped XGuard capability, never an upstream key.'}, 'idempotency_key': {'type': 'string', 'maxLength': 128, 'minLength': 8}}, 'additionalProperties': False}
xguard_status
Read observed execution/MCP metrics and configuration; empty observations do not imply uptime.
Solo lectura Idempotente
Esquema de entrada
{'type': 'object', 'properties': {}, 'additionalProperties': False}
xguard_verify_receipt
Verify a ProofRail proof and optionally its bound x402 receipt and result digest. Signature validity does not prove source truth.
Solo lectura Idempotente
Esquema de entrada
{'type': 'object', 'required': ['proof'], 'properties': {'proof': {'type': 'string', 'maxLength': 16000}, 'receipt': {'type': 'object'}, 'result_sha256': {'type': 'string', 'pattern': '^[a-f0-9]{64}$'}}, 'additionalProperties': False}
Modificado
xguard_discover
23 de September de 2026 a las 02:47
Modificado
xguard_get_result
21 de September de 2026 a las 02:53
Añadido
xguard_status
21 de September de 2026 a las 02:53
Modificado
xguard_discover
21 de September de 2026 a las 02:53
Añadido
xguard_verify_receipt
21 de September de 2026 a las 02:53
Añadido
xguard_quote
21 de September de 2026 a las 02:53
Añadido
xguard_preflight
21 de September de 2026 a las 02:53
Añadido
xguard_secretless_call
21 de September de 2026 a las 02:53
Modificado
xguard_execute
21 de September de 2026 a las 02:53
Añadido
xguard_get_result
17 de September de 2026 a las 12:45
Añadido
xguard_execute
17 de September de 2026 a las 12:45
Añadido
xguard_discover
17 de September de 2026 a las 12:45