Unplug MCP
Model Context Protocol server for Unplug — LLM defense layer.
Integrates with Claude Code, Cursor, Windsurf, and any MCP-compatible client.
Installation
pip install unplug-mcp
Optional ML span scanner:
pip install "unplug-mcp[ml]"
Run without a prior install (recommended for MCP clients):
uvx unplug-mcp
See examples/mcp.json for copy-paste client configs.
Usage
Local mode (default)
Add to your MCP client configuration:
Cursor — .cursor/mcp.json or Settings → MCP:
{
"mcpServers": {
"unplug": {
"command": "unplug-mcp",
"args": []
}
}
}
With uvx (no pip install):
{
"mcpServers": {
"unplug": {
"command": "uvx",
"args": ["unplug-mcp"]
}
}
}
Claude Desktop — claude_desktop_config.json:
{
"mcpServers": {
"unplug": {
"command": "unplug-mcp",
"args": []
}
}
}
Hosted server mode
Point at your Unplug API (same wire format as Guard(mode="server")):
{
"mcpServers": {
"unplug": {
"command": "unplug-mcp",
"env": {
"UNPLUG_MODE": "server",
"UNPLUG_SERVER_URL": "https://api.unplug-ai.org/v1",
"UNPLUG_API_KEY": "up_live_xxx"
}
}
}
}
Configuration
| Variable | Default | Purpose |
|---|---|---|
UNPLUG_MODE |
local |
local or server |
UNPLUG_CONFIG |
— | Path to Unplug TOML config |
UNPLUG_SERVER_URL |
— | Hosted API base URL (server mode) |
UNPLUG_API_KEY |
— | API key (server mode) |
UNPLUG_ACTIVE_MODEL |
— | ML model name override |
UNPLUG_MODEL_PATH |
— | Local ML checkpoint path |
Tools
| Tool | Purpose |
|---|---|
scan_text |
Scan user or retrieved content for injection/leakage |
scan_tool_result |
Scan tool output before the agent reads it |
check_destructive |
Gate side-effect tool calls |
wrap_untrusted_content |
Boundary markers + scan for RAG/web content |
session_status |
Session taint state for agent hardening |
notify_taint_source |
Record an untrusted content source in session state |
reset_session_taint |
Clear session taint tracking |
CI
ci.yml— lint + pytest against PyPIunplug-aipr-scan.yml— regex Guard scan on changed agent/MCP config files (viaUnplugAI/unplug-scan-action@v1)publish-pypi.yml— PyPI release on GitHub Release or manual dispatch
Development
uv sync --extra dev
uv run pytest -q
uv run unplug-mcp
Local SDK path override (monorepo): tool.uv.sources in pyproject.toml.
Distribution
See MARKETPLACE.md for MCP registry listing steps and PUBLISH.md for PyPI release workflow.
Related
- unplug-ai — Python SDK
- unplug-scan-action — GitHub Actions agent scan
- unplug-server — hosted scan API
License
Apache-2.0 — see LICENSE.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file unplug_mcp-0.1.3.tar.gz.
File metadata
- Download URL: unplug_mcp-0.1.3.tar.gz
- Upload date:
- Size: 126.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: uv/0.6.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
fb2ee0bd78a877d209a3fd718cc213fd7b8ec3ab742a1e7f798070b9a19cf4d7
|
|
| MD5 |
294dbc8f089e72cb10962be4f0eb61fc
|
|
| BLAKE2b-256 |
db6748bd79df125a9d16466bb16de93031a67352f7ac8be18c79d33ee574103c
|
File details
Details for the file unplug_mcp-0.1.3-py3-none-any.whl.
File metadata
- Download URL: unplug_mcp-0.1.3-py3-none-any.whl
- Upload date:
- Size: 26.5 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: uv/0.6.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
76a273977e9ffbb8768ffd3433da85f068e28ad5c9eb561b41f86860210057d0
|
|
| MD5 |
b5fdb529f1adb552be99939de378b2f7
|
|
| BLAKE2b-256 |
0f5749ae01928e16e56bb0f90480c3163d0430e6aab024dd87e9a0a01fc80ad5
|