protect-mcp
MCP security gateway — per-tool policies, Ed25519-signed decision receipts, shadow mode.
Install
pip install protect-mcp
Requires Node.js (for npx). Install from https://nodejs.org.
Usage
# Shadow mode — log everything, block nothing
protect-mcp -- node your-server.js
# Enforce mode — apply per-tool policies
protect-mcp --policy policy.json --enforce -- node your-server.js
# Verify receipts offline (MIT licensed, no ScopeBlind dependency)
npx @veritasacta/verify --self-test
What it does
Wraps any MCP server as a transparent stdio proxy. Every tool call decision is logged and optionally Ed25519-signed.
- Shadow mode (default): See what agents are doing without blocking
- Enforce mode: Block, rate-limit, or require approval per tool
- Signed receipts: Ed25519 + JCS canonicalization, verifiable offline
- CVE-anchored policies: Pre-built packs for known attack patterns
- OWASP coverage: Maps to OWASP Agentic Top 10
Links
- npm (canonical): https://npmjs.com/package/protect-mcp
- Docs: https://scopeblind.com/docs/protect-mcp
- IETF Draft: https://datatracker.ietf.org/doc/draft-farley-acta-signed-receipts/
- License: MIT
1 maintainer
Release files for protect-mcp 0.4.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| protect_mcp-0.4.0.tar.gz | 2.8 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| protect_mcp-0.4.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 6.2 kB
Release files / protect_mcp-0.4.0.tar.gz
| Download URL | protect_mcp-0.4.0.tar.gz |
|---|---|
| Size | 2.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
f9eb1c9b72645842d65c7cd93df93c79da4d3aeb3ae75cd094c47a24c3482e6e
|
|
BLAKE2b-256 checksum How to use checksums |
a7a735599f4511b3692504021f82000934aa3314e77e5f02f17e5fe53c840b1f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.13.6
|
Release files / protect_mcp-0.4.0-py3-none-any.whl
| Download URL | protect_mcp-0.4.0-py3-none-any.whl |
|---|---|
| Size | 3.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
354d2b556f2083dc382068eab1cbb80b030f04d45b7e00d339956082519f9f5f
|
|
BLAKE2b-256 checksum How to use checksums |
bcf55474e3782a6d2f974edb3b73c2e87084bf12c471c7c616841bd6733b368f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.13.6
|
