@codapult/guard is local-first, model-agnostic architecture guardrail software for AI coding agents. Use it to detect architectural drift, enforce approved software architecture rules, and check code changes in JavaScript and TypeScript projects.

Keyless storefront readiness probe linking a Store Guard audit, plus dispatch estimates and quotes.

Lead validation over MCP: KVK/KBO register, EU VAT, sanctions and email checks with sources.

Security infrastructure your AI can't be — deterministic, current past your model's training cutoff, whole-repo-aware, author-independent. Security MCP for vibe coding. 634 rules, 39 tools, CLI + doctor. Prompt-level shift-left security (secure_prompt — e

Fastest enterprise AI gateway (50x faster than LiteLLM) with adaptive load balancer, cluster mode, guardrails, 1000+ models support & <100 µs overhead at 5k RPS.

Exposes an assess_repo tool that scans a repository, local folder, or npm/PyPI package and returns supply-chain risk findings with file, line, and code evidence — install-time scripts, dangerous patterns, secrets, AI-agent manipulation, impersonation and published-artifact mismatches — while never executing the target's code. Findings carry severities from info to critical so results can gate installs and CI jobs.

Enables AI assistants to perform read-only scans of local projects, Git history, GitHub Actions workflows, machines, and GitHub accounts for supply-chain malware indicators, and to access cleanup and recovery guidance.

Exposes agent-facing tools that let a personal AI agent submit each proposed action for an allow, require_approval, or deny verdict against OWASP PAA10 policy rules, plus tools to record provenance-tagged memories, log refusals, read status, and trigger a self-stop. Its decisions are advisory unless paired with the project's gating proxy or hook, which enforce them.

Enables agents and applications to detect, inspect, and neutralize prompt injection, jailbreak attempts, and hidden instruction escapes in untrusted text before it is passed into prompts.

Enables AI assistants to raise, submit, approve, amend, and cancel purchase orders and onboard suppliers in ERPNext or SAP S/4HANA while enforcing procurement controls such as duplicate detection, budget limits, split-purchase checks, price tolerances, and segregation of duties.

Enables clients to look up failure modes and corresponding procedures, search and retrieve entries, and build prompts or reviews through structured tools over stdio JSON-RPC.

Find and redact leaked secrets, wallet keys and PII before an AI agent sends text.

Check an email before your AI agent sends it: allow, review or block with reasons.

An AI-enabled NAT Router/Firewall for the ESP32

🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.

High-frequency in-browser behavior tree execution engine for autonomous AI agents — 60Hz tick loops, reactive triggers, telemetry recordings, and safety guardrails.

Ephemeral data sandbox for AI workflows with guardrails and security

Enables auditing MCP configuration token usage, compressing tool catalogs, pruning bloated JSON responses, and optionally persisting compressed profiles under read-only defaults and safety guardrails.

A free, read-only server that lets users diagnose production AI-agent risks: it flags over-privileged API keys from permission descriptions, scans code snippets for the signals that prevent duplicate execution, and explains guard patterns such as idempotency keys, approval gates, outboxes, and circuit breakers. It makes no network calls or writes, and rejects inputs that look like real secrets.

Enables an AI agent to check live GPU prices, get a cost quote, rent a per-minute GPU instance, upload code and data, run jobs in the background, tail logs, download results and destroy the instance to stop billing. Includes guardrail limits on spend, hours and idle time, safe file transfer, and access to an OpenAI-compatible model API for inference without renting a GPU.

Guardian agent for AI coding: four frontier models review risky diffs and commits before they ship.

EPO/USPTO search, citations, OCR, plus PATSTAT Portfolio Analytics, guarded SQL and Graph Analytics.

Guardrails for LLM output: pass / fail / review verdicts and one recommended action. Hosted or npm.

Enables MCP clients such as Claude to read temperatures, fan speeds, power and clocks from a CoolerControl daemon, and to change fan profiles, fixed duty speeds, modes, functions, alerts and custom sensors through its REST API. Write operations are gated behind a token with write access, with an optional minimum-duty floor guarding against accidentally stopping a pump or fan.