io.github.Kavachh/agent-guard-mcp
Git-aware safe file ops for AI agents: delete anything except git-tracked source code.
Open source Open in the app JSON README (API)
About
Git-aware safe file ops for AI agents: delete anything except git-tracked source code.
Details
- Kind
- MCP servers
- Topic
- Version control
- Publisher
- kavachh
- Origin
- official
- Category
- ferramentas
- Transport
- local
- Version
- 0.2.0
- Last push
- 2026-07-21T18:31:47Z
- Repository state
- ativo
- Language
- Go
- License
- MIT
- Added
- 2026-08-29 03:02:00
- Updated
- 2026-08-29 03:02:00
- Origin id
io.github.Kavachh/agent-guard-mcp
README
# agent-guard-mcp
MCP server (written in **Go**, single static binary) for **git-aware safe file operations**. Give your AI agents (Claude Code, GitHub Copilot CLI, Cursor, …) free rein to delete what they build — while making it impossible for them to delete your git-tracked source code.
**Policy:** anything is deletable *until* it's tracked by a git repository.
## Tools
| Tool | Purpose |
|---|---|
| `safe_delete` | Delete files/dirs; refuses git-tracked files or dirs containing them. Supports `dry_run`. |
| `check_protection` | Report whether paths are protected and why. |
| `guard_status` | Summarize a directory: tracked (protected) vs untracked (deletable) counts. |
## Install
Build the single static binary (no runtime dependencies):
```bash
go build -o agent-guard-mcp .
```
Or install directly:
```bash
go install github.com/kavachh/agent-guard-mcp@latest
```
### Claude Code
```bash
claude mcp add agent-guard -- /path/to/agent-guard-mcp
```
### GitHub Copilot CLI
In `~/.copilot/mcp-config.json`:
```json
{
"mcpServers": {
"agent-guard": { "command": "/path/to/agent-guard-mcp", "args": [] }
}
}
```
### Any MCP client (generic stdio config)
```json
{ "command": "/path/to/agent-guard-mcp", "args": [] }
```
## Recommended agent instructions
Add to your `CLAUDE.md` / `AGENTS.md` / `.github/copilot-instructions.md`:
> Never use `rm` in the shell. Always delete files with the `safe_delete` MCP tool, which protects git-tracked source code.
Since `safe_delete` can never destroy tracked source, it is safe to auto-approve this server's tools in your client's permission settings.
## Example
```
safe_delete { "paths": ["build/", "scratch.txt"] }
→ deleted (untracked)
safe_delete { "paths": ["src/main/java/App.java"] }
→ BLOCKED: git-tracked source file — use `git rm` deliberately if intended
```
## Requirements
- `git` on PATH
- Go ≥ 1.24 (build only — the binary itself has zero dependencies)
## Testing
24-case edge suite (tracked/staged/ignored files, nested repos, symlinks, dry-run, …):
```bash
go build -o agent-guard-mcp . && npm test
```