Skip to content
Beckmann
DeutschNewsletter

MCP tools

Command Guard

Checks your AI agent’s shell commands before they run — blocks destructive ones like rm -rf, git push --force or DROP TABLE.

AI agents like Claude Code execute shell commands — fast and mostly right. Command Guard is the checkpoint for the rest: your agent passes the command line to check_command before running it and gets back “allow” or “block” — with a reason and a safer alternative.

Commands are checked against 7 curated protection packs (git, filesystem, disks, databases, containers, cloud, system) and your personal allow/deny list, which you edit in the browser.

What it does

  • Blocks destructive patterns BEFORE they execute
  • 7 protection packs with sensible defaults — active immediately
  • Personal allow/deny list per account, testable live
  • Response includes reason + safer alternative for the agent