Ext Ops Panel
Open dashboard
Comparison

Ramparts Security Scanner vs SQLGuard — Execution Certificate Firewall

Ramparts Security Scanner is an MCP server published by highflame-ai. Marketplaces we read that list it: 1 (Docker MCP Catalog). SQLGuard — Execution Certificate Firewall is an MCP server published by cabbageandtea. Marketplaces we read that list it: 1 (Official MCP Registry). As of our marketplace pass on 2026-10-14. This pair was picked by a reader, not by our comparison rule, so search engines are asked not to index the page.

Where each is published

Where each is published
MarketplaceRamparts Security ScannerSQLGuard — Execution Certificate Firewall
Docker MCP Catalog Listed
Version: sha256:1ddf4303800e
Forks (GitHub): 21
Pulls (Docker Hub): 34 832
Stars (Docker Hub): 0
Stars (GitHub): 98
Not marked · First seen
Not listed
Official MCP Registry Not listed Listed
Version: 1.1.20
No figure published
Not marked · First seen

Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.

The facts side by side

Ramparts Security Scanner vs SQLGuard — Execution Certificate Firewall
FactRamparts Security ScannerSQLGuard — Execution Certificate Firewall
Marketplaces that list it11
Stars (GitHub) (differs)98No figure on GitHub
Pulls (Docker Hub) (differs)34 832No figure on Docker Hub
Forks (GitHub) (differs)21No figure on GitHub
Last releaseNot publishedNot published
Where it runs (differs)On your machine (mcp/ramparts)Remote server (sqlguard.io/mcp)
Transport (differs)stdioStreamable HTTP
Tools it declares (differs)2Not published
Environment variables it asks for (differs)1, secrets among them: 0Not published
Licence (differs)Apache-2.0Not stated
Repository (differs)github.com/getjavelin/rampartsgithub.com/cabbageandtea/sqlguard
Changes in the last 7 days00
First seen2026-10-112026-10-11
Endpoint at the last check (differs)no remote endpoint we checkResponded 4 h ago

Lines where the two differ have a tinted background and bold values. Where the data itself says which value is better (more marketplaces, a larger figure of the same marketplace, a fresher release, a verified mark on a marketplace that lists both), the better one is also marked green with ▲ and the worse one red with ▼. Where it runs, the transport, the tools, the settings, hooks, the bundle's parts, the licence and the week's changes are marked only as different: more or fewer is not better in itself.

What each says it does

Ramparts Security Scanner

In its own words, on Docker MCP Catalog:

A comprehensive security scanner for MCP servers with YARA rules and static analysis capabilities.

SQLGuard — Execution Certificate Firewall

In its own words, on Official MCP Registry:

Permission before writes. Gravity→DENYs→Session $0.25. Pilot $100; Gateway $299. Probe free.

How to run each

Ramparts Security Scanner As a local MCP server: Docker image

Claude Code
claude mcp add --transport stdio ramparts -- docker run -i --rm mcp/ramparts

SQLGuard — Execution Certificate Firewall As a remote MCP server

Claude Code
claude mcp add --transport http sqlguard https://sqlguard.io/mcp

Commands built only from what the marketplaces declare; the full set for every client is on each card.

Only SQLGuard — Execution Certificate Firewall has a remote endpoint we check. How we check endpoints

Tools each declares

The marketplaces of SQLGuard — Execution Certificate Firewall publish no list of tools, so we do not compare tools.

Settings each asks for

The marketplaces of SQLGuard — Execution Certificate Firewall publish no settings it asks for, so we do not compare settings.

What it can do: Ramparts Security Scanner · What it can do: SQLGuard — Execution Certificate Firewall · Compare two other plugins

Data comes from the Docker MCP Catalog (desktop.docker.com/mcp/catalog) and Docker Hub. Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.

Where the data comes from: how the catalog is built