sudoviz/driftcop
Developer tools이 페이지는 AI로 자동 번역되었습니다. 기술적인 세부 사항은 원문을 확인하세요. 원문 보기
AI powered SAST tool for MCP servers to detect MCP server drift detection and tracking via SigStore + Web UI for Enterprise Users
개요
DriftCop. The ultrafast-fast security cop keeping your MCP servers locked-in and locked-down. Drift-Cop is your Enterprise grade MCP security scanner based CLI + live dashboard that spots dangerous drift in AI tools. It spots injection hacks, and CVEs, signs every change in SigStore. Drift-Cop is designed to help AI developers and InfoSec organizations identify, track, and mitigate security vulnerabilities in MCP server implementations they use from external untrusted sources. 1. – Diff every manifest, dependency and workspace change against golden baselines in real-time. 2. – Rug-pull, typosquat, supply-chain & prompt-injection rules baked-in and update daily. 3. – AI-generated fixes, PR suggestions and Slack/SIEM alerts 🚨. 4. – Lightweight CLI + Cloud Control-Plane give you end-to-end coverage without vendor lock-in. “We caught an auth-bypass typo before it hit production. Drift-Cop paid for itself on day one.
README
원문 README의 일부입니다. 원문 보기.
DriftCop. The ultrafast-fast security cop keeping your MCP servers locked-in and locked-down.
🎯 What is DriftCop?
Drift-Cop is your Enterprise grade MCP security scanner based CLI + live dashboard that spots dangerous drift in AI tools. It spots injection hacks, and CVEs, signs every change in SigStore. Drift-Cop is designed to help AI developers and InfoSec organizations identify, track, and mitigate security vulnerabilities in MCP server implementations they use from external untrusted sources.
🔥 Why Drift-Cop?
- Spot the Drift instantly – Diff every manifest, dependency and workspace change against golden baselines in real-time.
- Attack-aware Scanning – Rug-pull, typosquat, supply-chain & prompt-injection rules baked-in and update daily.
- Actionable Autopilot – AI-generated fixes, PR suggestions and Slack/SIEM alerts 🚨.
- Two-Piece Powerhouse – Lightweight CLI + Cloud Control-Plane give you end-to-end coverage without vendor lock-in.
“We caught an auth-bypass typo before it hit production. Drift-Cop paid for itself on day one.” – A Very Happy DevOps Lead
Drift-Cop is a defensive security platform designed to help developers and organizations identify, track, and mitigate security vulnerabilities in MCP server implementations. It consists of two main components working seamlessly together to provide end-to-end security coverage.
🎥 Demo Video
📦 Components
1. MCP Security Scanner (mcp-sec)
A powerful command-line security scanner that performs deep analysis of MCP servers, codebases, and dependencies.
Key Features:
설치
This server does not publish a one-line install command.
Open the repository installation guide MCP 초보자라면? mcpskill.org 가이드부터 시작하세요 →