helladmin-server 0.1.0a5

HellAdmin MCP proxy server — policy enforcement gateway for AI agents (alpha)

HellAdmin Server

MCP proxy server + kernel-level enforcement engine for AI agent infrastructure.

Contains:

• Landlock enforcer — unprivileged kernel file/network sandboxing (no root)
• seccomp-bpf — syscall filtering (ptrace, mount, unshare blocked)
• MCP proxy — reverse proxy for MCP servers with argument validation
• ArgumentValidator — blocks command injection, path traversal
• EgressGuard — blocks SSRF to cloud metadata endpoints
• Policy compiler — one YAML config to seccomp + AppArmor + nftables + Landlock rules
• Activity source detection — classify events by SSH session, container, process

Quick start

pip install helladmin

# Sandbox a process
helladmin run -- python3 agent.py

# MCP proxy
helladmin proxy add --name my-server --cmd python3 server.py --access public
helladmin proxy serve --port 8443

# Dashboard
helladmin dashboard --port 8888

Requirements

Linux (kernel 5.13+), Python 3.11+.

License

Apache-2.0