Connect your AI assistant directly to your software supply chain security data — query vulnerabilities, SBOMs, findings, and compliance, and run scans in plain language.
https://www.mcp.safeguard.sh/mcp
There is nothing to install: this server is hosted. Clients that support OAuth need no key. For a platform that can only send a fixed header, create an MCP key in Safeguard under Settings › Developer (key type MCP key) and send it as Authorization: Bearer sg_sk_.... MCP keys are offered only where API-key access to MCP is on for your workspace; ask your Safeguard administrator. The key acts as you, with your MCP access, and stops working within a minute of being revoked.
Add Safeguard to Claude as a custom connector. It signs in with your Safeguard account over OAuth 2.0 (authorization code with PKCE), so there is no key to copy and nothing to install.
https://www.mcp.safeguard.sh/mcp/anthropic
Claude Desktop uses the connectors you add in Claude, so the same connector works there. claude_desktop_config.json only starts local servers; Safeguard is hosted, so nothing goes in that file.
ChatGPT adds Safeguard as a custom MCP server and registers itself with Safeguard's OAuth server (POST /register, RFC 7591), so there is no client ID or key to copy. Your ChatGPT account and workspace policies decide whether you can add a custom MCP server.
https://www.mcp.safeguard.sh/mcp
Option A — Gemini CLI (recommended for developers). Add to ~/.gemini/settings.json:
{
"mcpServers": {
"safeguard": {
"httpUrl": "https://www.mcp.safeguard.sh/mcp",
"timeout": 30000,
"headers": {
"Authorization": "Bearer YOUR_MCP_KEY"
}
}
}
}
Option B — Google AI Studio (web). Uses the same OAuth flow as ChatGPT:
https://www.mcp.safeguard.sh/mcp and follow the OAuth login prompt.Cursor connects to remote MCP servers and signs in with OAuth, so the entry is the URL alone. Add it to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project):
{
"mcpServers": {
"safeguard": {
"url": "https://www.mcp.safeguard.sh/mcp"
}
}
}
The first time Cursor connects, it opens Safeguard in your browser. Sign in to Safeguard, check the app name and the host the authorization code will be sent to, then click Authorize access.
Use Safeguard with Google Vertex AI agents and the Vertex AI Agent Builder on cloud.google.com.
{
"mcpServers": {
"safeguard": {
"url": "https://www.mcp.safeguard.sh/mcp",
"headers": {
"Authorization": "Bearer YOUR_MCP_KEY"
}
}
}
}
For Vertex AI Agent Builder: add this as an external tool in your agent configuration. For Vertex AI extensions, use the OpenAPI spec at https://www.mcp.safeguard.sh/openapi.json.
Download Vertex AI config → | Create an MCP key under Settings › Developer
Google NotebookLM supports MCP tool integrations to augment research with live security data.
https://www.mcp.safeguard.sh/mcp and authorize with Safeguard.Microsoft Copilot at bing.com/copilot and copilot.microsoft.com supports MCP servers.
https://www.mcp.safeguard.sh/mcp and sign in with Safeguard.Use Safeguard with Azure AI agents and Azure OpenAI via ai.azure.com (Azure AI Foundry).
{
"mcpServers": {
"safeguard": {
"url": "https://www.mcp.safeguard.sh/mcp",
"headers": {
"Authorization": "Bearer YOUR_MCP_KEY"
}
}
}
}
For Azure AI Foundry agents: add as an MCP tool server in your agent's tool configuration. For Azure OpenAI Assistants: use the OpenAPI spec at https://www.mcp.safeguard.sh/openapi.json.
Download Azure config → | Create an MCP key under Settings › Developer
Use Safeguard with Meta's Llama models via llama.meta.com and Llama API integrations.
https://www.mcp.safeguard.sh/mcp and authorize with Safeguard.Perplexity supports MCP servers natively via OAuth 2.0. Connect directly from your Perplexity settings.
https://www.mcp.safeguard.sh/mcpDownload config → | Create an MCP key under Settings › Developer
Grok supports MCP servers on grok.com. Connect via the integrations panel.
https://www.mcp.safeguard.sh/mcpGitHub Copilot in VS Code uses the MCP servers in VS Code's MCP configuration. VS Code connects to remote servers over HTTP and runs Safeguard's OAuth sign-in itself. Add this to .vscode/mcp.json in your workspace, or to your user configuration with the MCP: Open User Configuration command:
{
"servers": {
"safeguard": {
"type": "http",
"url": "https://www.mcp.safeguard.sh/mcp"
}
}
}
When the server starts, VS Code opens Safeguard in your browser. Sign in to Safeguard, check the app name and the host the authorization code will be sent to, then click Authorize access.
Safeguard's MCP endpoint is the same for every client: https://www.mcp.safeguard.sh/mcp.
A client that supports OAuth signs in with your Safeguard account; a platform that can only
send a fixed header sends an MCP key as Authorization: Bearer sg_sk_….
Nothing needs installing.