guardian mcp for VS Code
io.github.odingard/guardian-mcp
Routes agent tool calls through Guardian for ALLOW/ASK/DENY before execution.
client:VS Code
transport:stdio
runtime:npm
Install guardian mcp in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "guardian-base-url",
"description": "GUARDIAN_BASE_URL",
"password": true
},
{
"type": "promptString",
"id": "guardian-agent-credential",
"description": "GUARDIAN_AGENT_CREDENTIAL",
"password": true
},
{
"type": "promptString",
"id": "guardian-connection-id",
"description": "GUARDIAN_CONNECTION_ID",
"password": true
},
{
"type": "promptString",
"id": "guardian-adapter-id",
"description": "GUARDIAN_ADAPTER_ID",
"password": true
}
],
"servers": {
"guardian-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@odingard/guardian-mcp"
],
"env": {
"GUARDIAN_BASE_URL": "${input:guardian-base-url}",
"GUARDIAN_AGENT_CREDENTIAL": "${input:guardian-agent-credential}",
"GUARDIAN_CONNECTION_ID": "${input:guardian-connection-id}",
"GUARDIAN_ADAPTER_ID": "${input:guardian-adapter-id}"
}
}
}
}
VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs