Ethicore Engine® Guardian — MCP server

On-demand AI-threat screening for MCP-speaking coding agents (Claude Desktop, Claude Code, Codex, Cursor). Exposes Guardian's four scans as tools:

Each returns Guardian's verdict — BLOCK / CHALLENGE / ALLOW — with threat categories and reasoning.

Paid feature — no free tier

The Guardian MCP is available to:

• Pro API plan and up — set ETHICORE_API_KEY to a Pro/Team/Enterprise key (hosted), or
• Bronze self-hosted and up — set ETHICORE_SELFHOST_LICENSE (+ ETHICORE_SELFHOST_PUBKEY) for a local, zero-egress server that wraps the self-hosted engine.

Free/community keys are refused at startup with an upgrade link. (Free access to Guardian is still available directly via the API/SDK — the MCP is the paid, agent-native convenience.) Purchase / upgrade: https://portal.oraclestechnologies.com/billing.

Install

pip install ethicore-guardian-mcp            # hosted edition
pip install "ethicore-guardian-mcp[selfhost]"  # + local self-hosted edition

Configure your client

Claude Desktop — claude_desktop_config.json → mcpServers:

{
  "mcpServers": {
    "guardian": {
      "command": "guardian-mcp",
      "env": { "ETHICORE_API_KEY": "eg-sk-your-PRO-key" }
    }
  }
}

Claude Code — one line:

claude mcp add guardian --env ETHICORE_API_KEY=eg-sk-your-PRO-key -- guardian-mcp

Self-hosted (local, zero egress) — swap the env for your license:

{
  "mcpServers": {
    "guardian": {
      "command": "guardian-mcp",
      "env": {
        "ETHICORE_SELFHOST_LICENSE": "EG-BRONZE-…",
        "ETHICORE_SELFHOST_PUBKEY": "<entitlement public key>"
      }
    }
  }
}

Codex and Cursor use the same command + env in their respective MCP config.

Environment

If a self-hosted license is present it takes precedence (air-gapped use).

How entitlement is enforced

• Hosted: the server calls GET /v1/me once at startup; unless the key's plan is Pro or higher (mcp_entitled: true), it exits with an upgrade message and serves nothing.
• Local: the server activates the self-hosted SDK; a valid Bronze+ license is required to activate, so activation is the entitlement. No data leaves your infrastructure.

mcp-name: io.github.OraclesTech/guardian-mcp

© 2026 Oracles Technologies LLC · Ethicore Engine® Guardian