Apiiro Guardian Agent
- 3 repo stars
- Updated June 22, 2026
- apiiro/mcp-server
io.github.apiiro/guardian-agent is a MCP server that exposes Apiiro ASPM tools so AI coding assistants can use application security posture during development.
About
io.github.apiiro/guardian-agent is Apiiro’s Guardian Agent delivered as a Model Context Protocol server so AI coding assistants can use Application Security Posture Management (ASPM) signals while you ship. and developers who later work inside Apiiro-backed orgs—or who run serious side projects with compliance needs—benefit when security context rides along in the IDE instead of living only in a separate dashboard you forget to open before merge. The catalog describes ASPM tools purpose-built for AI assistants, exposed via a streamable-http remote at mcp.apiiro.com, which suits Claude Code, Cursor, and other MCP clients that support hosted endpoints. Place it in Ship security when you are reviewing changes, validating risk against organizational policy, or hardening repos before release. It is posture and governance integration, not a replacement for dependency scanning you run locally. Expect Apiiro tenant access and policies to govern what data and actions the tools return.
- Apiiro Guardian Agent branded ASPM surface for AI coding assistants
- Hosted streamable-http MCP at https://mcp.apiiro.com/mcp
- Connects agent workflows to enterprise application security posture—not generic linting
- Catalog version 1.0.0 with GitHub source apiiro/mcp-server
- Remote MCP model: no local stdio package required in the catalog manifest
Apiiro Guardian Agent by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
claude mcp add --transport http guardian-agent https://mcp.apiiro.com/mcpAdd your badge
Show developers this MCP server is listed on Skillselion. Paste this into your README.
| repo stars | ★ 3 |
|---|---|
| Transport | HTTP |
| Auth | None |
| Last updated | June 22, 2026 |
| Repository | apiiro/mcp-server ↗ |
What it does
Pull Application Security Posture Management context into AI-assisted coding so agents align with Apiiro risk and policy data before you merge.
Who is it for?
Best when you're already on Apiiro and want MCP-native security posture inside Claude Code or Cursor sessions.
Skip if: Hobbyists without Apiiro access who only need free SAST on a single repo, or pure infrastructure MCP with no appsec program.
What you get
After connecting the Apiiro remote MCP, your assistant can consult ASPM-backed tools aligned with Guardian Agent posture data while you review and ship.
- Configured Apiiro Guardian remote MCP in your agent
- ASPM-oriented tool access during code review and ship workflows
By the numbers
- Remote URL: https://mcp.apiiro.com/mcp (streamable-http)
- Catalog version 1.0.0
- Repository: github.com/apiiro/mcp-server
README.md
Apiiro Guardian Agent MCP Server
Apiiro Guardian Agent enables AI coding assistants to leverage Application Security Posture Management (ASPM) capabilities through the Model Context Protocol (MCP). This integration allows developers to write secure code, query security risks, analyze repositories, trigger diff scans, and manage security findings directly from their AI assistant.
Overview
This MCP server connects AI assistants to Apiiro's security analysis platform, providing real-time security insights during development. The integration exposes Apiiro's security capabilities through MCP tools that can be invoked by supported AI coding assistants.
Supported Integrations
Cursor Plugin
- Open Cursor Settings > Tools & Integrations > MCP Tools
- Add a new MCP server with the URL:
https://mcp.apiiro.com/mcp
Google Gemini Extension
The Gemini extension is configured through gemini-extension.json and provides access to Apiiro's security analysis tools within the Gemini CLI environment.
Configuration:
- Extension manifest:
gemini-extension.json - Server endpoint:
https://mcp.apiiro.com/mcp - Authentication: OAuth, optional
$APIIRO_API_TOKENbearer token
Security Capabilities
The integration provides access to:
- Write secure code with real-time security guidance
- Query security risks across repositories
- Trigger differential scans on code changes
- Analyze repository security posture
- Manage and remediate security findings
- Application Security Posture Management (ASPM) analysis
How It Works
The Apiiro MCP server acts as a bridge between AI coding assistants and the Apiiro security platform. When invoked through MCP tools, the server communicates with Apiiro's API to retrieve security analysis, trigger scans, and provide actionable security insights within the developer workflow.
Setup
To use the Apiiro Guardian Agent, you need:
- An Apiiro account with API access
- A supported AI assistant configured to use MCP servers
License
Apache License 2.0
Recommended MCP Servers
1Claw VaultHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.2
1passwordMCP server for 1Password service accounts — tools and resources for vaults and credentials18
402sentinel McpAssess an x402 counterparty's risk BEFORE paying: allow/review/block, scored on-chain (Base).1
A2adependencyinspector McpRemote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
A2a Governance Bridge McpA2A Governance Bridge MCP server.A2aidentitytoll McpRemote MCP for A2A caller identity, scope policy, verdict receipts, and audit history.How it compares
Enterprise ASPM remote MCP for agents, not a local secrets vault or IoT control server.
FAQ
Who is io.github.apiiro/guardian-agent for?
It is for developers using AI coding assistants in environments where Apiiro Application Security Posture Management is already in use or planned.
When should I use io.github.apiiro/guardian-agent?
Use it in Ship security when you are reviewing, hardening, or releasing code and want agent suggestions informed by Apiiro posture rather than generic security heuristics alone.
How do I add io.github.apiiro/guardian-agent to my agent?
Add the streamable-http MCP remote https://mcp.apiiro.com/mcp in your compatible client and authenticate per Apiiro Guardian Agent / tenant documentation.