sudoviz/driftcop
Developer toolsこのページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。 原文を見る
AI powered SAST tool for MCP servers to detect MCP server drift detection and tracking via SigStore + Web UI for Enterprise Users
概要
DriftCop. The ultrafast-fast security cop keeping your MCP servers locked-in and locked-down. Drift-Cop is your Enterprise grade MCP security scanner based CLI + live dashboard that spots dangerous drift in AI tools. It spots injection hacks, and CVEs, signs every change in SigStore. Drift-Cop is designed to help AI developers and InfoSec organizations identify, track, and mitigate security vulnerabilities in MCP server implementations they use from external untrusted sources. 1. – Diff every manifest, dependency and workspace change against golden baselines in real-time. 2. – Rug-pull, typosquat, supply-chain & prompt-injection rules baked-in and update daily. 3. – AI-generated fixes, PR suggestions and Slack/SIEM alerts 🚨. 4. – Lightweight CLI + Cloud Control-Plane give you end-to-end coverage without vendor lock-in. “We caught an auth-bypass typo before it hit production. Drift-Cop paid for itself on day one.
README
以下は原文 README の抜粋です。原文を見る。
DriftCop. The ultrafast-fast security cop keeping your MCP servers locked-in and locked-down.
🎯 What is DriftCop?
Drift-Cop is your Enterprise grade MCP security scanner based CLI + live dashboard that spots dangerous drift in AI tools. It spots injection hacks, and CVEs, signs every change in SigStore. Drift-Cop is designed to help AI developers and InfoSec organizations identify, track, and mitigate security vulnerabilities in MCP server implementations they use from external untrusted sources.
🔥 Why Drift-Cop?
- Spot the Drift instantly – Diff every manifest, dependency and workspace change against golden baselines in real-time.
- Attack-aware Scanning – Rug-pull, typosquat, supply-chain & prompt-injection rules baked-in and update daily.
- Actionable Autopilot – AI-generated fixes, PR suggestions and Slack/SIEM alerts 🚨.
- Two-Piece Powerhouse – Lightweight CLI + Cloud Control-Plane give you end-to-end coverage without vendor lock-in.
“We caught an auth-bypass typo before it hit production. Drift-Cop paid for itself on day one.” – A Very Happy DevOps Lead
Drift-Cop is a defensive security platform designed to help developers and organizations identify, track, and mitigate security vulnerabilities in MCP server implementations. It consists of two main components working seamlessly together to provide end-to-end security coverage.
🎥 Demo Video
📦 Components
1. MCP Security Scanner (mcp-sec)
A powerful command-line security scanner that performs deep analysis of MCP servers, codebases, and dependencies.
Key Features:
インストール
This server does not publish a one-line install command.
Open the repository installation guide MCP 初心者？mcpskill.org のガイドから始めましょう →