PlugMyPlugin
← Browse

covenant-guard

open-covenant ★ 9

covenant-guard adds a `/guard` command and MCP server to Claude Code that enforces spend caps, sandboxes execution, and generates signed receipts through an external covguard binary running outside the agent's process. The plugin provides tools to read guard state and verify receipts, while the actual enforcement happens in the covguard binary installed separately.

Security DevOps No API key detected runs shell

Install

> /plugin marketplace add open-covenant/covenant/tree/HEAD/plugins/covenant-guard
> /plugin install covenant-guard

Source: https://github.com/open-covenant/covenant/tree/HEAD/plugins/covenant-guard

What it's made of

1 command · 1 MCP server · 1 hook

Commands
1
Agents
0
Skills
0
MCP servers
1
Hooks
1 · SessionStart

What it needs & plugs into

API keys
none
Paid services
none detected
External tools
covguard sh
Talks to
opencovenant.org

Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (open-covenant).