Haldir
Add a guardian MCP layer so agents enforce identity boundaries, handle secrets safely, and leave an audit trail instead of ad hoc env var dumps in chat.
Overview
io.github.ExposureGuard/haldir is a Ship-phase MCP server that acts as a guardian layer for AI agents across identity, secrets, and audit.
What is this MCP server?
- Guardian layer framing: identity, secrets, and audit exposed as MCP capabilities
- Haldir title in registry—companion to ExposureGuard security tooling
- PyPI package haldir v0.1.0 with stdio transport
- Early-stage 0.1.0 release—verify tool list in repo before production reliance
- MCP-native control plane for agent safety, not a standalone IAM product UI
- Server version 0.1.0
- PyPI identifier: haldir
- Transport: stdio
Community signal: 3 GitHub stars.
What problem does it solve?
Your agent sessions scatter secrets and privileged actions without consistent identity checks or an audit trail you can trust.
Who is it for?
Builders shipping agent workflows that must gate secrets and log actions without building a custom security middleware first.
Skip if: Simple local coding with no secrets, or enterprises that already mandate a full IdP plus SIEM with no MCP extension path.
What do I get? / Deliverables
After registration, sensitive agent operations can flow through Haldir MCP tools with clearer identity, secret, and audit guardrails.
- Stdio MCP guardian server wired into the agent
- Agent workflows routed through identity and secret-aware tools where supported
- Audit-oriented tool calls documented for compliance-style review
Recommended MCP Servers
Journey fit
How it compares
Agent guardian MCP (identity/secrets/audit)—not a domain exposure scanner and not a code review skill.
Common Questions / FAQ
Who is io.github.ExposureGuard/haldir for?
Indie and small teams running autonomous coding agents that need a structured security layer for identity, secrets, and audit.
When should I use io.github.ExposureGuard/haldir?
When moving from prototype agents to Ship-ready flows that touch real credentials, service identities, or actions you must log.
How do I add io.github.ExposureGuard/haldir to my agent?
Install haldir from PyPI, configure stdio MCP in your agent client, and follow ExposureGuard/haldir GitHub docs for identity and secret tool setup.