Skip to main content
Glama
AMEOBIUS-space

MCP Permission Guard

MCP Permission Guard — Pre-Action Authorization for AI Agents

Intent-based permission system with risk scoring, rule engine, and audit trail. Zero dependencies, pure Python stdlib.

The Problem

Agents execute destructive actions without guardrails. Binary allow/deny prompts don't work (93% auto-approved). The "lethal trifecta" — private data + untrusted content + external communication — creates risks no single tool can detect.

Related MCP server: blackwall-mcp

The Solution

MCP Permission Guard classifies tool calls into 14 intent categories, scores risk 0-100, evaluates rules, and produces deterministic allow/deny/ask decisions with full audit trail.

Tools (11)

Tool

What it does

classify_intent

Map tool call → intent category (14 types)

risk_assess

Score 0-100 with lethal trifecta detection

register_rule

Add allow/deny/ask rule by intent

evaluate

Full evaluation: classify + risk + rules → decision

audit_log

Query decision history

list_rules

Show all registered rules

remove_rule

Delete a rule

set_policy

Global policy: allow_all / deny_all / ask_all / rules_based

get_policy

Read current policy

get_stats

Decision statistics

reset

Clear all state

Intent Categories

filesystem_read (10) · filesystem_write (40) · filesystem_delete (80) · network_outbound (50) · network_inbound (30) · code_execution (60) · shell_command (70) · database_write (65) · database_read (20) · credentials_access (90) · config_change (55) · user_management (85) · service_restart (60) · package_install (75)

Tests

python -m pytest tests/ -v  # 38 tests, all passing

Inspiration

License

MIT — AMEOBIUS

Maintenance

ActivityMaintained
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    Policy-based governance for AI agent tool calls. YAML policies, approval gates, risk assessment, and audit logging across LangChain, OpenAI, Anthropic, and MCP.
    5
    15
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A pre-action risk gate for AI agents. Your agent calls the forecast tool before any irreversible action — send email, run SQL, make a payment, delete a file — and gets a risk score (0–100) and a GO / CONFIRM / STOP verdict in a few seconds.
    1
    519
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    An MCP server that enforces runtime authorization for tool calls using Stage0 policy validation, preventing AI agents from executing unauthorized actions before they happen.
    6
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Local zero-trust permission gateway for AI agents. Enforces policy-based tool authorization, human approvals, scoped permissions, and cryptographically verifiable audit logs.
    4
    5
    Apache 2.0

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/AMEOBIUS-space/mcp-permission-guard'

If you have feedback or need assistance with the MCP directory API, please join our Discord server