GuardrailAI
Uses Google Gemini to evaluate file write requests for sensitive information and provide explainable compliance decisions.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@GuardrailAIevaluate this file write for sensitive data: content contains SSN"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
GuardrailAI
Autonomous Regulatory Guardrail Agent using MCP and Google Gemini
GuardrailAI is an AI-powered compliance agent that evaluates file write requests before execution. By combining deterministic policy validation with Google Gemini reasoning, it detects sensitive information, explains compliance decisions, and prevents insecure data storage through an auditable governance workflow.
Dashboard Preview
AI Governance Dashboard

Live Audit Timeline
Risk Analytics | AI Compliance Auditor |
|
|
Problem
AI-powered applications frequently generate and write sensitive information such as passwords, API keys, personally identifiable information (PII), and confidential business data. Traditional rule-based validation lacks contextual reasoning and explainability, making governance and compliance difficult.
GuardrailAI ensures every file write request is evaluated before execution, reducing security risks while providing transparent, explainable decisions.
Solution
GuardrailAI processes every request through an AI-driven compliance pipeline:
Policy-based security validation
Sensitive data detection
Google Gemini compliance reasoning
Risk score calculation
Automated approval or rejection
Immutable audit logging
Live governance dashboard
System Architecture
Technology Stack
Layer | Technologies |
Frontend | HTML, CSS, JavaScript, Chart.js |
Backend | Node.js, Express.js |
AI | Google Gemini 2.5 Flash |
Protocol | Model Context Protocol (MCP) |
Key Features
MCP-based agent workflow
Google Gemini compliance reasoning
Multi-agent architecture
Policy-driven validation
API key and secret detection
PII detection
Password detection
Risk scoring
Explainable AI decisions
Interactive governance dashboard
Audit log generation
Compliance report export
Note : The MCP server communicates via the Model Context Protocol (STDIO transport) and is intended to be run locally with an MCP-compatible client. The deployed web application hosts the dashboard interface and visualization layer.
Project Structure
guardrail_ai/
│
├── agents/
├── api/
├── config/
├── dashboard/
├── logs/
├── output/
├── tools/
├── utils/
├── server.js
├── dashboardServer.js
└── package.jsonSetup
Clone the repository
git clone https://github.com/<username>/GuardrailAI.gitNavigate into the project
cd GuardrailAIInstall dependencies
npm installCreate a .env file
GEMINI_API_KEY=YOUR_API_KEYRun the application
npm startOpen
http://localhost:3000Concepts Demonstrated
Model Context Protocol (MCP)
Multi-Agent System
Google Gemini Integration
Security-Focused AI Agent
Explainable AI
Deployable Web Application
Future Enhancements
Policy Management Interface
Role-Based Access Control
PDF Compliance Reports
Historical Compliance Analytics
Multi-user Support
License
MIT License
This server cannot be deployed
Maintenance
Related MCP Connectors
AI governance MCP server for EU AI Act compliance and jurisdiction verification
- gatewayOAuthai.sealgate
MCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.
MCP server for detecting and redacting PII (Personally Identifiable Information) in PDF documents.
Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.
Related MCP Servers
- AlicenseNot gradedqualityNot gradedmaintenanceA deterministic MCP server that enforces auditable workflows by requiring AI agents to provide structured justifications and obtain human approval for file operations. It provides a secure, tamper-evident pipeline for tracking agent intent and codebase changes through cryptographic signatures and SQLite indexing.AGPL 3.0
- AlicenseNot gradedqualityCmaintenanceAn MCP server that enforces runtime governance on AI agent actions — file access, command execution, delegation chains, and permission escalation.MIT
- FlicenseNot gradedqualityDmaintenanceMCP server for file and directory operations with enterprise-grade security, enabling autonomous AI development workflows.-
- AlicenseNot gradedqualityCmaintenanceMCP server providing immutable audit logging, policy enforcement, and compliance reporting for AI agent workflows, enabling regulatory compliance and chain integrity verification.MIT

