Guardrails

MCP tools for the Guardrails module. See the Guardrails module docs for permissions and data model.

create-guardrail

Create a guardrail

Arguments

Argument	Type	Required	Description
project_id	string	no	Public ID of the project
name	string	yes	Human-readable name
description	string | null	no	—
document	object	yes	The action-class document. class maps a call to an action class; guard gates class-B autonomy. Both are single JSON Logic expressions over the args.* / context.* / runtime.* namespaces.
context_tool_id	string | null	no	—
context_mode	string	no	—
version_label	string	no	Optional tag for the config version this write archives (e.g. initial). Annotates the version only — it is not stored on the guardrail and is not part of the config, so labelling a change is never itself a change.

list-guardrails

List guardrails

Arguments

Argument	Type	Required	Description
project_id	string	no	Project public ID to filter by
limit	number	no	Results per page. Above the maximum it is clamped, and limit in the response reports the page served; below 1 or not an integer it is 400 VALIDATION_FAILED.
offset	number	no	Results to skip. Negative or not an integer it is 400 VALIDATION_FAILED.

get-guardrail

Get a guardrail

Arguments

Argument	Type	Required	Description
guardrail_id	string	yes	—

update-guardrail

Update a guardrail

Arguments

Argument	Type	Required	Description
guardrail_id	string	yes	—
name	string	no	—
description	string | null	no	—
document	object	no	The action-class document. class maps a call to an action class; guard gates class-B autonomy. Both are single JSON Logic expressions over the args.* / context.* / runtime.* namespaces.
context_tool_id	string | null	no	—
context_mode	string | null	no	—
version_label	string	no	Optional tag for the config version this write archives (e.g. pre-tightening). Annotates the version only — it is not stored on the guardrail and is not part of the config, so labelling a change is never itself a change. Ignored when the write changes no policy, since no version is created.
expected_version	any	no	Refuses the write unless the resource is at this version.

delete-guardrail

Delete a guardrail

Arguments

Argument	Type	Required	Description
guardrail_id	string	yes	—

list-guardrail-versions

List a guardrail's config versions

Arguments

Argument	Type	Required	Description
guardrail_id	string	yes	—
limit	number	no	Results per page. Above the maximum it is clamped, and limit in the response reports the page served; below 1 or not an integer it is 400 VALIDATION_FAILED.
offset	number	no	Results to skip. Negative or not an integer it is 400 VALIDATION_FAILED.

get-guardrail-version

Fetch an archived guardrail version

Arguments

Argument	Type	Required	Description
guardrail_id	string	yes	—
version	number	yes	—

restore-guardrail-version

Restore an archived guardrail config

Arguments

Argument	Type	Required	Description
guardrail_id	string	yes	—
version	number	yes	—
label	string	no	Optional tag for the version the restore creates. Defaults to restored from v<version>.

evaluate-guardrail

Dry-run evaluate a guardrail

Arguments

Argument	Type	Required	Description
guardrail_id	string	yes	—
args	object	no	The proposed call's arguments (the args.* namespace).
guardrail_context	object	no	The caller-supplied guardrail context (the context.* namespace), combined with the context tool per context_mode.
tool_id	string	no	Optional tool to resolve runtime.tools.* against.