Covenant Guard
Hard spend cap, OS sandbox, and signed receipts for unattended coding agents like Claude Code.
Install
MCPB bundlesstdio
https://github.com/open-covenant/covenant/releases/download/covguard-v0.1.1/covenant-guard.mcpb Client config (Claude Desktop, Cursor, Windsurf and most MCP clients)
{
"mcpServers": {
"org-opencovenant-guard": {
"command": "https://github.com/open-covenant/covenant/releases/download/covguard-v0.1.1/covenant-guard.mcpb",
"args": []
}
}
} Source: official MCP Registry record · registry name org.opencovenant/guard · published 2026-07-13 · updated 2026-07-13. Not an endorsement; review the code before connecting it to anything sensitive.