AI为MCP服务器的SAST提供动力,通过SigStore + Web UI为企业用户检测和跟踪MCP服务器漂移检测和跟踪工具
概览
漂流科普(原变种). 超快快的保安警察 让你的MCP服务器锁定和锁定 Drift-Cop是您的企业级 MCP 安全扫描仪基于 CLI + 活盘,在AI 工具中发现危险的漂移. 它发现注射黑客 和CVES,标志 西格斯托尔的每一个变化。 Drift-Cop旨在帮助AI开发者和InfoSec组织识别,跟踪,并减轻他们使用的来自外部不信任源的MCP服务器执行中的安全弱点. 1. 迪夫 实时对照黄金基线进行每个显示、依赖和工作空间变化。 2. Rug-pull、tungosquat、供应链和即时注射规则被烤入并每日更新。 3. – AI生成的修补,PR建议和Slack/SIEM提醒QQ 4. – 轻量级CLI + Cloud Control-Plane 给予您端到端的覆盖而无需供应商锁定. “在生产之前,我们发现了一个经认证的密码。 漂流科普在第一天自费.
概述（AI 翻译）
漂流科普(原变种). 超快快的保安警察 让你的MCP服务器锁定和锁定
– – . . . ####### 什么是漂流Cop?
Drift-Cop是您的企业级 MCP 安全扫描仪基于 CLI + 活盘,在AI 工具中发现危险的漂移. 它发现注射黑客 和CVES,标志 西格斯托尔的每一个变化。 Drift-Cop旨在帮助AI开发者和InfoSec组织识别,跟踪,并减轻他们使用的来自外部不信任源的MCP服务器执行中的安全弱点.
□□□□□□□□□□何为漂行克?
- ** 实时点出漂流 – Diff 每一次显示、依赖和工作空间变化都与黄金基线相对应。
- **Attack-aware Scanning ** – Rug-pull,twosquat,供应链和即时注射规则被烤入并每日更新.
- 可操作自动驾驶 – AI生成的校正,PR建议和Slack/SIEM提醒QQ.
- **Two-Piece Powerhouse ** – 轻量级CLI + Cloud Control-Plane 给您提供端到端的覆盖而无需供应商锁定.
- “在生产前,我们发现一个经认证的密码。 在第一天,
– – . .
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
DriftCop. The ultrafast-fast security cop keeping your MCP servers locked-in and locked-down.
🎯 What is DriftCop?
Drift-Cop is your Enterprise grade MCP security scanner based CLI + live dashboard that spots dangerous drift in AI tools. It spots injection hacks, and CVEs, signs every change in SigStore. Drift-Cop is designed to help AI developers and InfoSec organizations identify, track, and mitigate security vulnerabilities in MCP server implementations they use from external untrusted sources.
🔥 Why Drift-Cop?
- Spot the Drift instantly – Diff every manifest, dependency and workspace change against golden baselines in real-time.
- Attack-aware Scanning – Rug-pull, typosquat, supply-chain & prompt-injection rules baked-in and update daily.
- Actionable Autopilot – AI-generated fixes, PR suggestions and Slack/SIEM alerts 🚨.
- Two-Piece Powerhouse – Lightweight CLI + Cloud Control-Plane give you end-to-end coverage without vendor lock-in.
“We caught an auth-bypass typo before it hit production. Drift-Cop paid for itself on day one.” – A Very Happy DevOps Lead
Drift-Cop is a defensive security platform designed to help developers and organizations identify, track, and mitigate security vulnerabilities in MCP server implementations. It consists of two main components working seamlessly together to provide end-to-end security coverage.
🎥 Demo Video
📦 Components
1. MCP Security Scanner (mcp-sec)
A powerful command-line security scanner that performs deep analysis of MCP servers, codebases, and dependencies.
Key Features:
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手？先看 mcpskill.org 教程 →