Agentguard vs Vaara
A side-by-side look at the Agentguard and Vaara MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose Agentguard for security work over a hosted endpoint; choose Vaara for security as a local process. You can also run both side by side in one mcpServers block.
Which MCP server should you choose?
Choose Agentguard when
- You need dedicated capabilities in the Security domain.
- You prefer a remote HTTP/SSE transport.
- You want tools like
policy_preflight, tool_risk_score, approval_required.
Choose Vaara when
- You need dedicated capabilities in the Security domain.
- You prefer a local stdio subprocess transport.
Feature & specification comparison
Rows where the two servers differ are marked.
| Spec | ||
|---|---|---|
| Category | Security | Security |
| Quality signal | 45/100 · Fair | 48/100 · Fair |
| Install command | Confirmed | Confirmed |
| Transport | Remote HTTP/SSE | Local subprocess (stdio) |
| Auth | Not declared | Not declared |
| Pricing | Not declared | Not declared |
| Required env vars | None listed | None listed |
| Verified owner | Community listing | Community listing |
| GitHub stars | 0 | 15 |
| Directory activity | 2 views 0 installs 0 upvotes | 1 views 0 installs 0 upvotes |
| Tools | 7 | Not listed |
| Full listing | View Agentguard | View Vaara |
Tools & capabilities
Agentguard tools 7
policy_preflightPre-flight check before any tool call. Evaluates 7 policies, computes risk score, detects threats, auto-logs. Returns `allowed`/`denied`/`require_approval`/`flagged`.tool_risk_score0-100 risk score for tool + input. Detects secrets (API keys, passwords), prompt injection, high-value amounts. `eth_gas`→5, `payment_execute`→95+.approval_requiredCheck if tool needs human approval. Optionally registers a pending approval request with tracking URL.audit_log_writeWrite tool execution to persistent, cryptographically-signed audit log (SQLite WAL). Call after execution to record outcome.audit_log_queryQuery audit trail. Filter by agent, tool, decision, time range. Paginated. Returns signed entries for tamper verification.decision_explainHuman-readable explanation of any allow/deny decision. Pass `request_id` for stored entry or `tool_name` + `tool_args` for fresh analysis.rate_limit_checkCheck agent rate limits: 200/min, 5000/hr, 50000/day. Returns per-window usage with percentage.
Vaara tools
No tool names declared yet. Check the project README from the listing page.
Ready-to-paste client configs
Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
Agentguard
{
"mcpServers": {
"agentguard-2": {
"url": "https://feedoracle.io/guard/mcp/"
}
}
}
Vaara
{
"mcpServers": {
"vaara": {
"command": "npx",
"args": [
"--upstream-arg",
"-y",
"--upstream-arg",
"@sap/mdk-mcp-server"
]
}
}
}
Frequently asked questions
Agentguard is categorized under Security and uses a remote HTTP/SSE transport. Vaara belongs to Security and uses a local stdio subprocess. Pick Agentguard for security work and Vaara for security.
Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client.
Agentguard has no declared pricing — check the project's own site. Vaara has no declared pricing — check the project's own site. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.
Yes. MCP clients support multiple servers: add agentguard-2 and vaara as separate keys in the same mcpServers object, and your assistant will call tools from either one.
On AllMCPs, Agentguard has a quality signal of 45/100 (Fair) with 2 views, 0 installs and 0 GitHub stars. Vaara has 48/100 (Fair) with 1 views, 0 installs and 15 GitHub stars.