Three public tools
for your assistant

Exactly three tools

Every tool has an IP rate limit. Trial requests also keep the website's one-trial-per-email limit. A shared network or an assistant provider's shared outgoing IP can share a limit. Wait before retrying a rate-limited call.

Receipt verification allows 60 requests per minute per IP, and documentation questions allow 10. These two limits share the existing website handlers' in-memory counters within each running server instance; they are not a global allowance across instances. Trial issuance allows five new trials per IP per UTC day through the existing shared trial store. The MCP endpoint also limits each IP to 120 requests per minute per instance, including discovery and repeated trial requests.

There are no other tools or MCP resources. The server does not provide account, billing, license lookup or customer-data access. Trial requests use the existing issuance and email flow.

Claude and Claude Code

In Claude, open Customize > Connectors, select the plus button, then Add custom connector. Enter this name and URL:

Name: AgentGuard
Remote MCP server URL: https://agentguard.run/api/mcp

No OAuth credentials are needed. Add the connector, then enable it in the conversation's connectors menu. For a Team or Enterprise workspace, an owner first adds it under Organization settings > Connectors > Add > Custom > Web. Account and workspace rules can limit which connectors you can add.

For Claude Code, run these exact commands in your terminal:

claude mcp add --transport http agentguard https://agentguard.run/api/mcp
claude mcp get agentguard

The command uses Claude Code's default local scope. Use /mcp inside Claude Code to inspect the connection and tools. Claude's hosted connector connects from Anthropic's servers; Claude Code's direct HTTP configuration is a separate connection.

Setup checked on September 21, 2026 against the official Claude custom connector guide and Claude Code MCP reference.

ChatGPT

1. Open Settings > Security and login and enable Developer mode. Availability depends on your account and workspace policy.
2. Open ChatGPT Plugins and select the plus button.
3. Enter the fields below. Under Connection, choose a public endpoint. No authentication credentials are needed.
4. Create the connection and review the three discovered tools. Start a new conversation and add the connection from the tools menu.

Name: AgentGuard
Description: Receipt verification, trial requests and AgentGuard documentation.
MCP server URL: https://agentguard.run/api/mcp

ChatGPT uses these connection fields, not a local JSON configuration file. If you change the server's tools, refresh the connection metadata before starting a new conversation.

Setup checked on September 21, 2026 against OpenAI's Connect and test your plugin guide.

Cursor

Add this entry to .cursor/mcp.json in your project, or ~/.cursor/mcp.json for your personal configuration. Preserve any other server entries already in the file.

{
  "mcpServers": {
    "agentguard": {
      "url": "https://agentguard.run/api/mcp"
    }
  }
}

Open Cursor's Customize page to inspect the server. No authorization headers are required. Team allowlists can still restrict remote servers.

Setup checked on September 21, 2026 against the official Cursor MCP reference.

Try a call

Ask your assistant to call ask_docs with:

{"question":"How does your refund policy work?"}

To request your trial email, ask it to call start_trial with your own address. This action sends an email if you are eligible:

{"email":"[email protected]"}

For verify_receipt, put your receipt JSON object or decision-chain array in the receipt field. An object can also contain the public verifier's chain, entries or dag wrapper. Include publicKeyHex when the decision-chain verifier needs your public key. Use a public key only. Never submit a signing key.

Tool results preserve the website handler's JSON in structuredContent, with its HTTP status in _meta.httpStatus. A rejected request is marked isError; the result explains the failure.

What you choose to send

The receipt, question or email you submit to a hosted tool is sent to AgentGuard's server. This is separate from the local plugin, which does not forward its tool traffic here.

Receipt verification uses the existing public verifier. Its log records the supplied receipt identifier, a hash of the connecting IP, client metadata and the verification result. The receipt payload itself is not included in that verification log.

Documentation questions use the same service as the website's help chat. A question outside the fixed answers may be sent to the guarded help model. A question that needs review can be forwarded to the support team through the existing escalation flow.

Trial requests use your email to apply the existing trial limits and send the trial email. Do not include customer information, prompts, private files, credentials or signing keys in tool arguments.

Read What leaves your machine for the plugin's network inventory and the privacy policy for the website's services.

Discovery and connection checks

A regular GET to /api/mcp returns a short JSON description and the tool list. The discovery document is /.well-known/mcp.json. Tool calls use the MCP client transport; opening the URL in a browser does not call a tool.

Use a client that supports Streamable HTTP. The hosted service does not need a bearer token, does not offer a legacy SSE endpoint and does not provide a persistent notification stream.

Built against the 2026-07-28 transport specification with the official TypeScript SDK 2.0.0. The SDK also serves stateless 2025 Streamable HTTP clients. The discovery JSON is a site description, not a separate MCP protocol standard.