Apiiro Guardian Agent
Pull Application Security Posture Management context into AI-assisted coding so agents align with Apiiro risk and policy data before you merge.
Overview
io.github.apiiro/guardian-agent is a Ship-phase MCP server that exposes Apiiro ASPM tools so AI coding assistants can use application security posture during development.
What is this MCP server?
- Apiiro Guardian Agent branded ASPM surface for AI coding assistants
- Hosted streamable-http MCP at https://mcp.apiiro.com/mcp
- Connects agent workflows to enterprise application security posture—not generic linting
- Catalog version 1.0.0 with GitHub source apiiro/mcp-server
- Remote MCP model: no local stdio package required in the catalog manifest
- Remote URL: https://mcp.apiiro.com/mcp (streamable-http)
- Repository: github.com/apiiro/mcp-server
What problem does it solve?
Agents generate code fast but lack your org’s live security posture, so risky patterns slip through until a late manual review.
Who is it for?
Builders and small teams already on Apiiro who want MCP-native security posture inside Claude Code or Cursor sessions.
Skip if: Hobbyists without Apiiro access who only need free SAST on a single repo, or pure infrastructure MCP with no appsec program.
What do I get? / Deliverables
After connecting the Apiiro remote MCP, your assistant can consult ASPM-backed tools aligned with Guardian Agent posture data while you review and ship.
- Configured Apiiro Guardian remote MCP in your agent
- ASPM-oriented tool access during code review and ship workflows
Recommended MCP Servers
Journey fit
How it compares
Enterprise ASPM remote MCP for agents, not a local secrets vault or IoT control server.
Common Questions / FAQ
Who is io.github.apiiro/guardian-agent for?
It is for developers using AI coding assistants in environments where Apiiro Application Security Posture Management is already in use or planned.
When should I use io.github.apiiro/guardian-agent?
Use it in Ship security when you are reviewing, hardening, or releasing code and want agent suggestions informed by Apiiro posture rather than generic security heuristics alone.
How do I add io.github.apiiro/guardian-agent to my agent?
Add the streamable-http MCP remote https://mcp.apiiro.com/mcp in your compatible client and authenticate per Apiiro Guardian Agent / tenant documentation.