Safeguard for Grok.
Connect Safeguard’s MCP server to Grok by xAI and ask about your software supply chain security in natural language. Query vulnerabilities, SBOMs, packages, licenses, and compliance data — and let Grok reason over your real security posture.
This is Safeguard’s MCP server endpoint purpose-built for Grok. Add it as a custom connector, then sign in to Safeguard and click Authorize access. Nothing to install.
What you can do in Grok.
Once the Safeguard Security connector is enabled, Grok can call 35+ security tools and read MCP resources and prompts on your behalf.
Query vulnerabilities & findings
Ask about CVEs, severities, and open findings across your projects in plain language — no query syntax required.
Explore SBOMs, packages & licenses
Inspect components, package versions, transitive dependencies, and license obligations pulled straight from your SBOMs.
AI-powered remediation plans
Generate concrete fix plans for npm, pip, Maven, Go, and Cargo projects — upgrade paths, breaking-change notes, and all.
Compare & analyze SBOMs
Diff and analyze SBOMs in both CycloneDX and SPDX formats to see what changed between builds and releases.
SCM integrations
Reach repositories across GitHub, GitLab, Bitbucket, and Azure DevOps to scope security questions to real code.
Risk scoring & compliance reporting
Surface risk scores and compliance posture, then turn the answers into reports your stakeholders can read.
Policy-gate enforcement
Evaluate policy gates for deployment readiness and understand exactly why a build would pass or be blocked.
Multi-tenant for enterprise
Built multi-tenant from the ground up, so large organizations can keep teams and data cleanly isolated.
Enable it in a few steps.
- 01
Create your Safeguard account
Register an account at app.safeguard.sh — or sign in if you already have one.
- 02
In Grok, add a custom MCP connector
Open Grok and add a custom MCP connector / server.
- 03
Enter the connector URL
Enter the URL https://mcp.safeguard.sh/mcp/grok and name it “Safeguard Security”.
- 04
Authorize access
When Grok sends you to Safeguard, sign in, check the app name, then click Authorize access.
- ✓
Done — ask away
Safeguard’s 70+ security tools are now available to Grok. Start asking questions.
Using Cursor, VS Code or another MCP client? Safeguard hosts the server, so there is nothing to install: add it by URL. In Cursor’s mcp.json:
{
"mcpServers": {
"safeguard": {
"url": "https://mcp.safeguard.sh/mcp"
}
}
}VS Code takes the same URL as a "type": "http" server in .vscode/mcp.json. The client opens Safeguard’s sign-in page: sign in and click Authorize access. Safeguard publishes no npm package or local bridge for its MCP server, so treat any package that claims to be one as untrusted.
Auth is simple: you just need a Safeguard account. Create one at app.safeguard.sh if you don’t have one, then click Authorize access when Grok sends you to Safeguard. A client that can only send a fixed header uses an MCP key instead: create one under Settings → Developer (key type MCP key) and send it as Authorization: Bearer sg_sk_…. If you don’t see it, ask your Safeguard administrator: API-key access to MCP is turned on per workspace.
Example prompts.
Bring your supply chain into Grok.
Add the Safeguard Security connector, sign in with OAuth, and start asking Grok about your vulnerabilities, SBOMs, and compliance in seconds.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.