From 2cb8fb53fe3e5d5c1b3ba6f11134e7c9f5aea1f7 Mon Sep 17 00:00:00 2001
From: armorer-labs <armorer-labs@users.noreply.github.com>
Date: Tue, 19 May 2026 14:27:52 +0800
Subject: [PATCH] Document Armorer Guard MCP proxy

---
 README.md | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/README.md b/README.md
index 9d55822..6af87b6 100644
--- a/README.md
+++ b/README.md
@@ -88,6 +88,31 @@ Full example configuration (for Claude Desktop, Claude Code, and Cursor):
 }
 ```
 
+**Optional local guardrail:**
+```json
+{
+  "mcpServers": {
+    "octopusdeploy": {
+      "type": "stdio",
+      "command": "armorer-guard",
+      "args": [
+        "mcp-proxy",
+        "--",
+        "npx",
+        "-y",
+        "@octopusdeploy/mcp-server"
+      ],
+      "env": {
+        "OCTOPUS_SERVER_URL": "https://your-octopus.com",
+        "OCTOPUS_API_KEY": "YOUR_API_KEY"
+      }
+    }
+  }
+}
+```
+
+This optional configuration uses [Armorer Guard](https://github.com/ArmorerLabs/Armorer-Guard) as a local MCP proxy. It inspects Octopus tool-call arguments for prompt injection, credential leakage, exfiltration risk, and dangerous actions before forwarding safe calls to the Octopus MCP Server.
+
 **Read-only mode (recommended for production):**
 ```json
 {