protect-mcp
MCP security gateway that wraps any MCP server with per-tool policies, Ed25519-signed decision receipts, and human approval gates. Shadow mo
Open source Repository Open in the app JSON README (API)
About
MCP security gateway that wraps any MCP server with per-tool policies, Ed25519-signed decision receipts, and human approval gates. Shadow mode (default) logs every tool call without blocking. Enforce mode applies per-tool allow/deny/rate-limit/approval policies. Every decision is cryptographically signed and independently verifiable offline. MIT licensed. IETF Internet-Draft published for the receipts protocol.
Details
- Kind
- Plugins
- Topic
- Finance & crypto
- Publisher
- tomjwxf
- Origin
- marketplace
- Category
- ferramentas
- Forks
- 1
- Last push
- 2026-04-03T03:34:14Z
- Repository state
- ativo
- Added
- 2026-08-30 01:48:58
- Updated
- 2026-08-30 01:48:58
- Origin id
tomjwxf/protect-mcp-plugin/protect-mcp
README
# protect-mcp — Claude Code Plugin MCP security gateway for Claude Code. Per-tool policies, Ed25519-signed receipts, human approval gates. ## Install ```bash claude /plugin install https://github.com/tomjwxf/protect-mcp-plugin ``` Or test locally: ```bash claude --plugin-dir ./claude-plugin ``` ## Skills | Skill | Description | |-------|-------------| | `/protect-mcp:shadow` | Wrap any MCP server in shadow mode (log everything, block nothing) | | `/protect-mcp:enforce` | Apply per-tool security policies | | `/protect-mcp:verify` | Verify Ed25519-signed receipts offline | | `/protect-mcp:red-team` | Benchmark policies against attack suites | ## Commands | Command | Description | |---------|-------------| | `/protect-mcp:shadow <cmd>` | Quick-start shadow mode | | `/protect-mcp:verify [file]` | Verify a receipt or run self-test | ## Links - npm: https://npmjs.com/package/protect-mcp - IETF Draft: https://datatracker.ietf.org/doc/draft-farley-acta-signed-receipts/ - Docs: https://scopeblind.com/docs/protect-mcp - License: MIT (protect-mcp), Apache-2.0 (verification layer)