Skip to content
mcp/harbor
Windsurf

AgentGuard for Windsurf

io.github.merchantguard/agentguard

Local spend caps, kill-switch blocking and Ed25519-signed receipts for AI agent tool calls.

client:Windsurf transport:stdio runtime:npm

Install AgentGuard in Windsurf

~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json

Held in this page only — never stored, logged, or sent anywhere but back to your screen. 

{
  "mcpServers": {
    "agentguard": {
      "command": "npx",
      "args": [
        "-y",
        "@agentguard-run/mcp"
      ],
      "env": {
        "AGENTGUARD_MCP_DAILY_CAP_CENTS": "<AGENTGUARD_MCP_DAILY_CAP_CENTS>",
        "AGENTGUARD_MCP_PER_CALL_CAP_CENTS": "<AGENTGUARD_MCP_PER_CALL_CAP_CENTS>",
        "AGENTGUARD_MCP_TENANT": "<AGENTGUARD_MCP_TENANT>",
        "AGENTGUARD_HOME": "<AGENTGUARD_HOME>",
        "AGENTGUARD_MCP_LEDGER": "<AGENTGUARD_MCP_LEDGER>",
        "AGENTGUARD_MCP_DISABLE_COST_OVERRIDE": "<AGENTGUARD_MCP_DISABLE_COST_OVERRIDE>",
        "AGENTGUARD_LOCK_COST_OVERRIDES": "<AGENTGUARD_LOCK_COST_OVERRIDES>",
        "AGENTGUARD_ACTOR_DIGEST": "<AGENTGUARD_ACTOR_DIGEST>",
        "AGENTGUARD_LICENSE_KEY": "<AGENTGUARD_LICENSE_KEY>",
        "AGENTGUARD_LICENSE_ENDPOINT": "<AGENTGUARD_LICENSE_ENDPOINT>",
        "AGENTGUARD_NO_BEACON": "<AGENTGUARD_NO_BEACON>",
        "AGENTGUARD_TELEMETRY": "<AGENTGUARD_TELEMETRY>",
        "AGENTGUARD_INSTALL_ID": "<AGENTGUARD_INSTALL_ID>",
        "AGENTGUARD_ANONYMOUS_INSTALL_ID": "<AGENTGUARD_ANONYMOUS_INSTALL_ID>",
        "CI": "<CI>",
        "GITHUB_ACTIONS": "<GITHUB_ACTIONS>",
        "GITLAB_CI": "<GITLAB_CI>",
        "CIRCLECI": "<CIRCLECI>",
        "BUILDKITE": "<BUILDKITE>",
        "VERCEL": "<VERCEL>",
        "NETLIFY": "<NETLIFY>"
      }
    }
  }
}

Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs

AgentGuard in other clients

AgentGuard MCP server