How do I install Repoguard Rules?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Repoguard Rules need an API key?

No required environment variable is listed on this record.

What transport does Repoguard Rules use?

Repoguard Rules runs locally over stdio.

เซิร์ฟเวอร์ MCP Repoguard Rules

Q: When was Repoguard Rules last checked?

Last checked 2026-10-28. The Architecture Guardian for AI-assisted codebases. Enforces clean layers, generates .cursorrules & CLAUDE.md for TypeScript, Python, Golang and Rust, and runs standalone MCP Server (Tools, Resources, Prompts).

Power your agent

เพิ่มเซิร์ฟเวอร์นี้

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code รันบน PlugMCP

Host a copy with our keys and logs.

Local command

npx -y [email protected]

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1claude mcp add repoguard-rules -- npx -y repoguard-rules@1.7.0

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "repoguard-rules": {4      "command": "npx",5      "args": [6        "-y",7        "[email protected]"8      ]9    }10  }11}

claude_desktop_config.json

Local · npmPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

รันบน PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

เปิด

Server facts

Local

Transport: stdio
Version: 1.7.0
Last checked

Overview

About Repoguard Rules

The Architecture Guardian for AI-assisted codebases. Enforces clean layers, generates .cursorrules & CLAUDE.md for TypeScript, Python, Golang and Rust, and runs standalone MCP Server (Tools, Resources, Prompts).

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

🛡️ RepoGuard

New in v1.7.0: Rust panic safety, expanded secret detection, and MCP Tools + Resources + Prompts.

🎮 Try it in your browser: RepoGuard Interactive Playground — Audit code snippets in real-time with zero install.

⚡ The Problem

AI coding assistants (Cursor, GitHub Copilot, Claude Code, Windsurf) write 300 lines of code in seconds. However, without strict repository guardrails, they frequently introduce AI Code Rot:

Bypass Architectural Layers: Run raw database queries (Prisma, Drizzle, SQLAlchemy, GORM, SQLx, Diesel) directly inside UI components or HTTP handlers.
Reinvent Existing Helpers: Write duplicate date/string utilities instead of importing from /utils or shared packages.
Escape Type Safety & Error Handling: Scatter : any in TypeScript, discard errors with _ = err in Go, or use panic-prone .unwrap() in Rust production code.
Leak Sensitive Secrets: Hardcode AI/cloud provider tokens, embed database credentials in connection URLs, or expose secrets with the NEXT_PUBLIC_ prefix.

RepoGuard acts as an automated architecture supervisor: it generates strict, customized .cursorrules, CLAUDE.md, and .windsurfrules context files, verifies pre-commit diffs in ~12ms, runs an MCP server with Tools, Resources, and Prompts, and performs inline audits on every Pull Request.

🚀 Quickstart

Run directly in any repository (zero installation required):

npx repoguard-rules init

Or install globally:

npm install -g repoguard-rules
repoguard init

What happens in 2 seconds:

🔍 Auto-detects your tech stack (Next.js, NestJS, Express, FastAPI, Django, Gin, Fiber, Axum, Actix-web, Prisma, GORM, SQLx, Diesel, etc.).
🔐 Audits code and supported config files (.env, .env.*, .json, .yaml, .toml, .pem, .key) for provider tokens and embedded database credentials.
📝 Generates tailored .cursorrules (for Cursor AI).
🤖 Generates a comprehensive CLAUDE.md (for Claude Code).
🌊 Generates .windsurfrules (for Windsurf IDE).
🛡️ Generates .github/copilot-instructions.md (for GitHub Copilot).
⚙️ Configures pre-commit guard hooks & CI workflow.

🤖 Native Model Context Protocol (MCP) Server

RepoGuard ships with a built-in, zero-dependency MCP Server implementing the full 3-pillar standard (Tools, Resources, and Prompts) for Claude Desktop, Claude Code, Cursor, and Windsurf.

Connect to Claude Desktop (`claude_desktop_config.json`):

{
  "mcpServers": {
    "repoguard": {
      "command": "npx",
      "args": ["-y", "[email protected]", "mcp"]
    }
  }
}

Connect to Cursor (`~/.cursor/mcp.json` or `.cursor/mcp.json`):

{
  "mcpServers": {
    "repoguard": {
      "command": "npx",
      "args": ["-y", "[email protected]", "mcp"]
    }
  }
}

MCP Capabilities:

🛠️ Tools:
- repoguard_audit: Full repository audit against 16 architectural guardrails.
- repoguard_diff: Real-time audit of uncommitted git changes to catch AI drift before commit.
- repoguard_get_rules: Returns all 16 active architectural rules to prevent AI hallucination.
- repoguard_fix: Analyzes code snippets and returns actionable refactoring plans.
📦 Resources:
- repoguard://rules: Direct JSON access to all architectural rules and remediation advice.
- repoguard://health: Real-time codebase health score and violation breakdown.
💡 Prompts:
- architectural_review: Pre-configured prompt instructing AI agents to review diffs against Clean Architecture.
- clean_architecture_refactor: Pre-configured prompt to decouple controllers into Service and Repository layers.

🛠️ CLI Commands & Formats

Command	Description
`npx repoguard-rules init`	Scans codebase and generates tailored AI context files (TS, Py, Go, Rust).
`npx repoguard-rules audit`	Evaluates entire codebase and returns an Architectural Health Score (A+ to F).
`npx repoguard-rules audit --format=sarif`	Generates standard OASIS SARIF v2.1.0 for GitHub Code Scanning integration.
`npx repoguard-rules audit --format=json`	Outputs machine-readable JSON for custom CI/CD pipelines.
`npx repoguard-rules diff`	Audits uncommitted git diffs against architectural rules in real-time.
`npx repoguard-rules fix`	Analyzes codebase and generates actionable before/after architectural refactoring suggestions.
`npx repoguard-rules mcp`	Launches the Model Context Protocol stdio server for AI agents.
`npx repoguard-rules hook install`	Configures local `.git/hooks/pre-commit` to prevent rule breaches.
`npx repoguard-rules rules`	Displays all 16 built-in architectural rules and descriptions.

Ignoring Files & Folders (`.repoguardignore`)

Add a .repoguardignore file to your root directory to skip specific files or directories:

# .repoguardignore
legacy/
migrations/
test/fixtures/

🛡️ Built-in Architectural Rules (16 Active Guardrails)

Rule ID	Category	Severity	Guardrail Enforced
RULE-01	Architecture	Error	Prohibits raw ORM/DB queries in UI components and Controllers (TS/JS).
RULE-PY-01	Architecture	Warning / Critical	Enforces FastAPI layer separation; forbids direct DB queries and raw commits (`db.commit()`) inside route handlers.
RULE-GO-01	Architecture	Warning / Critical	Enforces Clean Architecture in Go; prohibits raw database/GORM operations inside Gin, Fiber, or Echo HTTP handlers.
RULE-GO-02	Error Handling	Warning	Flags unchecked errors silenced via blank identifier (`_ = err`) in Go.
RULE-RS-01	Error Handling	Warning	Flags unsafe `.unwrap()` or `.expect()` in production Rust logic that cause thread crashes and panics.
RULE-RS-02	Architecture	Warning	Enforces Clean Architecture in Rust (Axum, Actix-web, Rocket); forbids direct SQLx / Diesel queries inside route handlers.
RULE-02	Security	Critical	Flags hardcoded secrets, private keys, and API tokens.
RULE-SEC-01	Security	Critical	Detects provider-format AI/cloud tokens and credential-bearing database URLs in source and supported config files.
RULE-SEC-02	Security

🤖 GitHub Action & Security Integration

RepoGuard dogfoods its own architecture on every push. You can add continuous architectural enforcement to your CI/CD pipeline using the official Action:

# .github/workflows/ci.yml
name: CI & Architecture Guard

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

jobs:
  audit:
    name: Unit Tests & Dogfood Audit
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20

      - name: Run Architecture & Stack Tests
        run: npm test

      - name: Dogfood Audit (RepoGuard on RepoGuard)
        run: node bin/repoguard.js audit --strict

GitHub Code Scanning (SARIF v2.1.0):

      - run: npx repoguard-rules audit --format=sarif > repoguard.sarif
      - uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: repoguard.sarif

💎 Plans & Enterprise Upgrades

RepoGuard is 100% free and open-source for public repositories and local development. For automated CI/CD PR enforcement, private teams, and custom architectural rule engines:

Tier	Price	Ideal For	What's Included
Open Source	$0 (Free Forever)	Solo builders & public repos	Unlimited local CLI scans, `.cursorrules`, `CLAUDE.md`, MCP Server, pre-commit hooks, all 16 built-in rules
Developer Pro	$12 / month	Independent engineers & contractors	Unlimited private repositories, automated PR Review Bot, custom rules engine, secret leak detector
Engineering Team	$39 / month	Startups & engineering orgs	Up to 5 devs, GitHub Org-wide CI/CD merge blocker, SOC2 architecture audit logs, Slack/Discord alerts

👉 Subscribe to Developer Pro ($12/mo) • Upgrade Team ($39/mo) • 🇧🇷 Pagar no PIX (R$ 67 à vista)

📈 Star History

👥 Contributors & Community

Special thanks to the open source engineers contributing to RepoGuard:

@taylormatematica-beep (Lead Maintainer & Author)
@NihalPN — Authored RULE-PY-01 & FastAPI architectural guardrails (PR #3)

🌟 Support & Community

🌐 Documentation & Live Hub: https://taylormatematica-beep.github.io/repoguard/
📦 NPM Registry: https://www.npmjs.com/package/repoguard-rules
🐱 Product Hunt: https://www.producthunt.com/products/repoguard

If RepoGuard helps keep your AI coding clean, consider giving this repository a ⭐ Star!

เพิ่มเซิร์ฟเวอร์นี้

Host a copy with our keys and logs.

Server facts

About Repoguard Rules

Tools

Questions

How do I install Repoguard Rules?

Does Repoguard Rules need an API key?

What transport does Repoguard Rules use?

When was Repoguard Rules last checked?

Documentation

🛡️ RepoGuard

⚡ The Problem

🚀 Quickstart

What happens in 2 seconds:

🤖 Native Model Context Protocol (MCP) Server

Connect to Claude Desktop (claude_desktop_config.json):

Connect to Cursor (~/.cursor/mcp.json or .cursor/mcp.json):

MCP Capabilities:

🛠️ CLI Commands & Formats

Ignoring Files & Folders (.repoguardignore)

🛡️ Built-in Architectural Rules (16 Active Guardrails)

🤖 GitHub Action & Security Integration

GitHub Code Scanning (SARIF v2.1.0):

💎 Plans & Enterprise Upgrades

📈 Star History

👥 Contributors & Community

🌟 Support & Community

Connect to Claude Desktop (`claude_desktop_config.json`):

Connect to Cursor (`~/.cursor/mcp.json` or `.cursor/mcp.json`):

Ignoring Files & Folders (`.repoguardignore`)