CodeGuard AI MCP Server

Automate LGPD/GDPR compliance in your CI/CD.

README.md

šŸ›”ļø CodeGuard AI

Stop Shadow APIs from reaching production. Automate LGPD/GDPR compliance in your CI/CD.

Stop wasting hours in code reviews hunting for PII leaks. CodeGuard scans your code in seconds and auto-fixes compliance risks — so you ship faster and avoid €20M GDPR fines.


šŸš€ Works Everywhere You Code

CodeGuard runs where you need it:

1. šŸ’» **VS Code / Cursor**

Instant feedback while you type.

Ctrl+Shift+P → "CodeGuard: Scan for Compliance"

Install Extension

2. šŸ¤– **Claude Desktop (MCP)**

Give your AI Agent a "Compliance Brain".

npx -y codeguard-ai start:mcp

3. šŸ”„ **CI/CD (GitHub Actions / GitLab)**

Block non-compliant PRs automatically.

# .github/workflows/security.yml
- run: npx codeguard-ai scan . --fail-on-violation

4. ⚔ **CLI (Terminal)**

npm install -g codeguard-ai
codeguard scan .

⚔ Why Developers Love CodeGuard

āŒ Without CodeGuard āœ… With CodeGuard
Manual review for PII leaks Instant detection in milliseconds
Guess if code is compliant Clear risk score + fine estimates
Fix issues yourself AI auto-fix applied with one click
Risk €20M GDPR fines Ship with confidence

🧠 Multi-LLM Orchestrator

We don't just wrap ChatGPT. We orchestrate a team of experts:

  • 🧠 Security Specialist: Uses GPT-4o for vulnerability detection.
  • āš–ļø Legal Expert: Uses Claude 3.5 Sonnet for nuanced compliance (GDPR/LGPD).
  • ⚔ High-Speed Linter: Uses DeepSeek for instant regex pres-canning.

šŸ’° Pricing & Plans

Feature Free (Local) Pro (€79/mo) Enterprise
Persona Indie Dev / Junior Tech Lead / Teams CTO / DPO
Goal Fix my own code Fix the team's PRs Pass the Audit
Shadow API Scan āœ… Unlimited āœ… Unlimited āœ… Unlimited
Deep Compliance Audit āŒ āœ… LGPD/GDPR āœ… All Frameworks
CI/CD Blocking āš ļø Manual (No Exit Code) āœ… Automated (Exit 1) āœ… Automated (Exit 1)
Auto-Fix āŒ āœ… Included āœ… Included
Reports (PDF) āŒ āŒ āœ… Included
Support Community Priority Email Dedicated Slack

BYOK (Bring Your Own Key): You can use the Pro AI features for free if you bring your own OpenAI/Anthropic API Key. (Manual setup required).

Start Pro Trial | Contact Enterprise Sales


šŸ¢ CodeGuard Enterprise

For companies with 20+ developers or regulated industries (Finance, Health, Fintech).

āœ… Everything in Pro, plus:

  • Custom Frameworks: PCI-DSS, HIPAA, SOC2, ISO 27001.
  • Governance Dashboard: See risk posture across all repos.
  • Single Sign-On (SSO): Okta, Azure AD, Google Workspace.
  • On-Premise: Run CodeGuard inside your VPC (Air-gapped).

ā“ FAQ

Q: Is it free? A: Yes! The basic Shadow API scanner is free forever. You can identify risks locally without paying anything.

Q: What is the difference between Free and Pro? A: Free is for Discovery (finding problems). Pro is for Action (blocking problems in CI/CD and auto-fixing them).

Q: Can I use my own API Keys (BYOK)? A: Yes! If you want to use the Deep Audit features without a Pro subscription, you can configure your own OpenAI/Anthropic keys. However, CI/CD blocking features require a Pro license.


šŸ“§ Support

Made with ā¤ļø by CodeGuard — Protect your code. Avoid fines. Ship with confidence.

Tools 2

scanScans the codebase for compliance risks and PII leaks.
auto-fixApplies automated fixes to identified compliance violations.

Environment Variables

OPENAI_API_KEYAPI key for GPT-4o vulnerability detection
ANTHROPIC_API_KEYAPI key for Claude 3.5 Sonnet compliance analysis

Try it

→Scan the current directory for any potential GDPR or LGPD compliance risks.
→Identify PII leaks in the src/api folder and provide a summary of the risk.
→Auto-fix the compliance violations found in the user authentication module.
→Analyze the codebase for Shadow APIs that might be reaching production.

Frequently Asked Questions

What are the key features of CodeGuard AI?

Multi-LLM orchestration using GPT-4o, Claude 3.5 Sonnet, and DeepSeek. Automated detection of PII leaks and compliance risks. One-click AI auto-fix for identified security and compliance issues. Support for over 15 compliance frameworks including GDPR and LGPD.

What can I use CodeGuard AI for?

Developers identifying PII leaks locally before pushing code to production. Tech leads automating compliance checks within CI/CD pipelines. Teams ensuring adherence to GDPR and LGPD standards to avoid regulatory fines. Security engineers auditing codebases for Shadow APIs.

How do I install CodeGuard AI?

Install CodeGuard AI by running: npx -y codeguard-ai start:mcp

What MCP clients work with CodeGuard AI?

CodeGuard AI works with any MCP-compatible client including Claude Desktop, Claude Code, Cursor, and other editors with MCP support.

Turn this server into reusable context

Keep CodeGuard AI docs, env vars, and workflow notes in Conare so your agent carries them across sessions.

Open Conare