Security & Testing

xguardgate.com

Provides safety testing and policy inspection for agent transactions.

1 endpoint19 known toolsFirst detected August 26, 2026Last detected September 5, 2026

ENDPOINT 1

https://api.xguardgate.com/mcp

No auth detected

MCP server metadata

Name: xguard-universal-paid-secretless-gateway
Version: 5.1.0

Capabilities

tools

Server instructions

XGuard Universal Paid AI Agent + Secretless Gateway exposes signed pricing and x402-paid tools while keeping reusable upstream API credentials outside AI agent context. Operators provision encrypted credentials and scoped capabilities; agents use xguard_egress_fetch. When an operator keeps the reusable credential exclusively in XGuard instead of distributing it to agents, XGuard becomes the required credential-backed egress path for that agent environment. ProofRail adds an ES256-signed proof to authorized credential-backed egress outcomes so callers can verify the enforced path without seeing the secret. Canonical remote MCP endpoint: https://api.xguardgate.com/mcp. XGuard Action Rail, x402 facilitator routing, receipts and inspection remain available as compatibility capabilities.

Known tools 19

xguard.capabilities

Return the enabled and disabled XGuard tools, their security boundary, and canonical discovery URLs.

Inferred read-only

xguard.preflight

Free, read-only safety gate for xguard.web.fetch.

Inferred read-only

xguard.pricing.quote

Use before xguard.web.fetch.

Inferred read-only

xguard.web.fetch

Paid, read-only public HTTPS fetch.

Inferred read-only

xguard_proofrail

Discover XGuard ProofRail.

Inferred read-only

xguard_verify_proof

Verify an XGuard ProofRail compact ES256 proof and return its signed execution payload.

Inferred read-only

xguard_egress_fetch

Execute one scoped outbound HTTPS request using an XGuard capability.

Potential side effects

xguard_secretless_egress

Discover XGuard Secretless Egress.

Inferred read-only

xguard_action_rail

Discover XGuard Action Rail: a protocol-neutral execution gate for AI side effects.

Inferred read-only

xguard_facilitator

Return XGuard's machine-readable x402 facilitator identity, endpoints, live capabilities, automatic routing policy and pricing.

Inferred read-only

xguard_route

Ask XGuard which live downstream settlement path it would choose for an x402 network/scheme while keeping XGuard as the configured facilitator URL.

Inferred read-only

xguard_discovery_search

Search the x402 Bazaar catalogs reachable through XGuard without knowing a provider or tool name in advance.

Inferred read-only

xguard_safety_test

Score a transaction sample without contacting its target.

Inferred read-only

xguard_protocols

List transaction protocols and edge surfaces recognized by XGuard.

Inferred read-only

xguard_inspect

Classify and policy-check a transaction without forwarding it.

Inferred read-only

xguard_health

Return XGuard facilitator and downstream settlement-path health.

Inferred read-only

xguard_supported

Return currently supported x402 payment kinds aggregated from healthy configured settlement providers.

Potential side effects

xguard_receipt

Look up a durable XGuard settlement receipt.

Inferred read-only

xguard_integration

Return integration, security controls and pricing for the XGuard in-path facilitator URL.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.xguard-universal-paid-secretless-gateway]
url = "https://api.xguardgate.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "xguard-universal-paid-secretless-gateway": {
      "type": "http",
      "url": "https://api.xguardgate.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: xguard-universal-paid-secretless-gateway
Remote MCP URL: https://api.xguardgate.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "xguard-universal-paid-secretless-gateway": {
      "url": "https://api.xguardgate.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "xguard-universal-paid-secretless-gateway": {
      "type": "http",
      "url": "https://api.xguardgate.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "xguard-universal-paid-secretless-gateway",
  "transport": "streamable-http",
  "url": "https://api.xguardgate.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.