protect-mcp 0.4.0

MCP security gateway — per-tool policies, Ed25519-signed receipts, shadow mode

protect-mcp

MCP security gateway — per-tool policies, Ed25519-signed decision receipts, shadow mode.

Install

pip install protect-mcp

Requires Node.js (for npx). Install from https://nodejs.org.

Usage

# Shadow mode — log everything, block nothing
protect-mcp -- node your-server.js

# Enforce mode — apply per-tool policies
protect-mcp --policy policy.json --enforce -- node your-server.js

# Verify receipts offline (MIT licensed, no ScopeBlind dependency)
npx @veritasacta/verify --self-test

What it does

Wraps any MCP server as a transparent stdio proxy. Every tool call decision is logged and optionally Ed25519-signed.

• Shadow mode (default): See what agents are doing without blocking
• Enforce mode: Block, rate-limit, or require approval per tool
• Signed receipts: Ed25519 + JCS canonicalization, verifiable offline
• CVE-anchored policies: Pre-built packs for known attack patterns
• OWASP coverage: Maps to OWASP Agentic Top 10

Links

• npm (canonical): https://npmjs.com/package/protect-mcp
• Docs: https://scopeblind.com/docs/protect-mcp
• IETF Draft: https://datatracker.ietf.org/doc/draft-farley-acta-signed-receipts/
• License: MIT