mcp-hub-corp/mcp

Developer tools

Эта страница переведена автоматически. Технические детали смотрите в оригинале. Открыть оригинал

2 stars 1 forks Качество 80 Тренд 12MIT

Repository Install

Official MCP server of MCP-Hub

Обзор

MCP Hub Security Security gate for MCP servers and Claude Code Skills. Scan any Git repository or SKILL.md against 14+ vulnerability classes before trusting it. is an MCP server that acts as a security gate for your AI agent workflows. Before your agent runs an MCP server from a Git repository — or loads a Claude Code Skill — it can call this server to get a full vulnerability analysis from mcp-hub.info. - Prompt injection & instruction override - Secret and credential exposure - Tool poisoning & shadow tools - SSRF and unsafe network calls - Dangerous capabilities (exec, file write, env access) - Data exfiltration vectors - ...and more mapped to the OWASP MCP Top 10 Claude Code Skills (SKILL.md files) are scanned by 17 dedicated analyzers covering 61 rules — detecting instruction overrides, capability abuse, prompt injection hooks, and more.

README

Показан фрагмент оригинального README. Открыть оригинал.

Quick install · Claude Code setup · How it works · Tools reference · Get API key

What is this?
Features
Quick install
MCP client configuration — includes watchdog setup for Claude Code
How it works
Environment variables
Available tools
Examples
Troubleshooting

What is this?

MCP Hub Security is an MCP server that acts as a security gate for your AI agent workflows. Before your agent runs an MCP server from a Git repository — or loads a Claude Code Skill — it can call this server to get a full vulnerability analysis from mcp-hub.info.

It detects 14 vulnerability classes including:

Prompt injection & instruction override
Secret and credential exposure
Tool poisoning & shadow tools
SSRF and unsafe network calls
Dangerous capabilities (exec, file write, env access)
Data exfiltration vectors
…and more mapped to the OWASP MCP Top 10

Skills support: Claude Code Skills (SKILL.md files) are scanned by 17 dedicated analyzers covering 61 rules — detecting instruction overrides, capability abuse, prompt injection hooks, and more.

Features

MCP server scanning — submit any GitHub, GitLab, or Bitbucket repository and get a security score (0–100), risk level, capabilities list, OWASP coverage, and full findings.
Skill scanning — scan a SKILL.md by content or URL; get a pass/fail verdict under configurable policy.
Policy engine — configure minimum score, maximum risk level, and denied capabilities via environment variables. The server enforces policy and returns allowed: true/false with clear reasons.
Proactive watchdog hook — a Claude Code PostToolUse hook that automatically scans any SKILL.md you create or edit and warns you immediately.
Credit-aware — each scan costs 5 credits; cached results (same commit SHA) are free. Balance is always returned.

Открыть полный README на GitHub

Установка

uvx --from git+https://github.com/mcp-hub-corp/[email protected] mcp-hub-security

Новичок в MCP? Начните с руководства на mcpskill.org →

Конфигурация

{
  "mcpServers": {
    "mcp-hub-security": {
      "command": "uvx",
      "args": ["--from", "git+https://github.com/mcp-hub-corp/[email protected]", "mcp-hub-security"],
      "env": {
        "MCPHUB_API_KEY": "YOUR_API_KEY"
      }
    }
  }
}