A lightweight, sub-millisecond security shim that prevents AI agents from accessing sensitive files (.env, SSH keys) and executing destructive commands via MCP.
Zero-overhead policy enforcement gateway and runtime guardrail for Model Context Protocol (MCP) servers.
argos acts as a transparent security pipe between AI clients (Claude Desktop, Cursor) and underlying MCP tool servers. Inspired by the zero-friction philosophy of Quad9/Pi-hole, it inspects raw JSON-RPC traffic on the fly and deterministically blocks unauthorized file access, path traversal attacks, and destructive commands before they reach your system.
- Sub-millisecond Overhead: Built with pure Rust and Tokio asynchronous streams. Zero perceptible lag for the agent or developer. - Path Traversal Sandboxing: Enforces strict workspace boundaries via OS path canonicalization and ../ stripping. - Secret & Sensitive File Shield: Block access to .env, private keys (idrsa, ided25519), and cloud credentials. - Destructive Command Blocker: Intercepts dangerous terminal commands (rm -rf, disk formatters, fork bombs). - Local Audit Logging: Records blocked and allowed actions into a structured, JSON-lines log (argos-audit.log) without cloud telemetry. - Flexible Configuration: Declarative rule customization via argos.toml. - Your Own Local & Private Tool: Built entirely in Rust as a self-contained, ~1 MB single binary with zero external telemetry or cloud dependencies. Argos relies strictly on deterministic pattern matching, native OS primitives, and JSON-RPC stream interception—ensuring your sensitive code, configuration keys, and audit trails never leave your local machine. ---
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/JUSICK--Argos-mcp-guardrail.html)
Give the agent "this" and he gets a real PC.
Shalimov04/mcp-airlockStateless governance proxy for MCP (2026-07-28): policy, dry-run, human confirmation, audit, tracing
mkpoli/gmail-mcpMulti-account Gmail MCP server on Cloudflare Workers — one deployment, one Google sign-in per connection, any MCP client
agent-chaperone/agent-chaperoneScreens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a client's built-in tools.
12122J/mcpvetMCP security scanner — vet a Model Context Protocol server before you add it to Claude Code, Cursor, or Windsurf. Grades it A–F, catching credential theft, tool-poisoning, and install-script payloads
sgateway/s-gwLocal credential control for AI coding agents.
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.