DevGuard-MCP
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@DevGuard-MCPscan this project for exposed .env files and secret leaks"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
🛡️ DevGuard-MCP
DevGuard-MCP is a fast, local, deterministic developer workspace auditor, safe cleaner, and Model Context Protocol (MCP) server.
✨ Features
🔍 Workspace Auditing: Detects reclaimable build artifacts, dependencies, and caches (
node_modules,.venv,.pytest_cache,__pycache__,target/,build/,dist/, logs).🔒 Security & Hygiene Check: Identifies untracked/exposed
.envfiles and potential secret leaks.🗑️ Safe Cleanup: Built-in safety mechanisms with dry-run previews, recycle bin / trash quarantine (
send2trash), and protected system path verification.📊 Rich CLI: Aesthetic terminal user interface built with Typer and Rich (tables, progress bars, colored summaries).
🤖 MCP Server: Native Model Context Protocol (FastMCP) support to let AI assistants (Claude, Cursor, Antigravity, etc.) audit and clean development workspaces safely.
Related MCP server: opzyai
🚀 Quick Start
Installation
python -m pip install -e .CLI Usage
# Scan current workspace
devguard scan
# Audit secrets and .env files
devguard audit
# Clean artifacts (with dry-run preview by default)
devguard clean --dry-run
# Clean specific artifacts to Recycle Bin
devguard clean --type node_modules --trashMCP Server Usage
Run the MCP server locally over stdio:
devguard-mcpMaintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Audit GitHub repos for malicious and supply-chain code before you depend on them.
Screens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.
Related MCP Servers
- AlicenseAqualityDmaintenanceEnables AI assistants to scan project dependencies and Infrastructure as Code files for security vulnerabilities and misconfigurations. It also provides automated fixing capabilities to remediate identified security issues.183MIT
- AlicenseNot gradedqualityBmaintenanceLocal-first security check for AI coding agents — finds hardcoded secrets, exposed .env files, git-history leaks and vulnerable dependencies (OSV), entirely on your machine. Ask your agent "is this safe to ship?" and get a Launch Readiness score with a fix for every finding.MIT
- AlicenseAqualityDmaintenanceScans projects for hardcoded secrets, unprotected .env files, and console.log leaks to prevent credential exposure.558MIT
- AlicenseNot gradedqualityBmaintenanceEnables AI assistants to scan source code for secrets like API keys and passwords locally without network requests.2Apache 2.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/YoruichiYams/devguard-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server