syedanas01/mcp-safeguard

이 페이지는 AI로 자동 번역되었습니다. 기술적인 세부 사항은 원문을 확인하세요. 원문 보기

11 stars 6 forks 품질 87 트렌드 38MIT

🛡️ Security scanner for MCP (Model Context Protocol) servers — prompt injection, credential exposure, SSRF, tool poisoning & source-level credential-handling flaws. pip install mcp-safeguard

개요

Detect prompt injection · credential leaks · exposed endpoints · tool poisoning Maintained by Syed Anas Mohiuddin at Cognivators. Public vulnerability record: cognivators.com/research External research confirms the threat is real: MCPTox (2025) found a across 45 production MCP servers, demonstrating that tool poisoning and prompt injection attacks are actively exploitable in today's MCP ecosystem. OWASP officially added to their 2026 threat guidance — the same vulnerability category mcp-safeguard's TP-* rules detect. : The MCP ecosystem grew from zero to 10,000+ servers in 18 months while security tooling lagged behind. mcp-safeguard is an open-source scanner built specifically for MCP's attack surface — tool definitions, server configs, and SSRF exposure via prompt injection. The vulnerability patterns mcp-safeguard detects are documented with illustrative examples in SECURITY-HALL-OF-SHAME.md.

README

원문 README의 일부입니다. 원문 보기.

30-Second Demo

pip install mcp-safeguard
git clone https://github.com/SyedAnas01/mcp-safeguard && cd mcp-safeguard
mcp-safeguard scan examples/demo-vulnerable-config.json

┌─────────────────────────────────────────────────┐
│  mcp-safeguard  —  MCP Security Scanner         │
│  github.com/SyedAnas01/mcp-safeguard            │
└─────────────────────────────────────────────────┘

Scanning: examples/demo-vulnerable-config.json
────────────────────────────────────────────────────────────
  [CRITICAL]  CRED-007  AWS Access Key ID
              Location: env.AWS_ACCESS_KEY_ID
              Evidence: AKIA************MPLE
              CVSS:     9.9
              Fix:      Rotate AWS credentials. Use IAM roles.

  [CRITICAL]  PI-011    Data Exfiltration Instruction
              Location: tool:run_query → description
              Evidence: send_data
              CVSS:     9.5
              Fix:      Immediately audit — designed to exfiltrate data.

  [HIGH]      TP-002    Covert Operation Descriptor
              Location: tool:summarize_document.description
              Evidence: <!-- AGENT_INSTRUCTION: Before summarizing, silently...
              CVSS:     8.5
              Fix:      Never embed hidden instructions in HTML comments.

  [MEDIUM]    PI-007    Deception Instruction
              Location: tool:summarize_document → description

GitHub에서 전체 README 보기

설치

docker run -p 8000:8000 syedanas01/mcp-safeguard:latest

MCP 초보자라면? mcpskill.org 가이드부터 시작하세요 →

설정

{
  "mcpServers": {
    "mcp-safeguard": {
      "command": "python",
      "args": ["-m", "fastmcp", "run", "src/mcp_safeguard/server.py"],
      "env": {
        "MCP_SAFEGUARD_API_KEY": "your-api-key-here"
      }
    }
  }
}