AIM Guard MCP

🛡️ AIM MCP Server :: Guard and Protect your MCPs & AI Agents

A Model Context Protocol (MCP) server that provides AI-powered security analysis and safety instruction tools. This server helps protect AI agents by providing security guidelines, content analysis, and cautionary instructions when interacting with various MCPs and external services.

Features

🔧 Tools (6 total)

• 🛡️ AI Safety Guard: Contextual security instructions for MCP interactions

• 🔍 Text Guard Analysis: Harmful content detection using AIM Intelligence API

• 🔒 Security Prompt Enhancement: Add security layers to user prompts

• 🚨 Prompt Injection Detector: OWASP LLM01:2025 compliant injection detection

• 🔐 Credential Scanner: Scan for exposed API keys, passwords, tokens, and secrets

• 🌐 URL Security Validator: Validate URLs for phishing, malware, and HTTPS enforcement

📚 Resources (9 total)

• 📋 Security Checklists: MCP-specific security checklists (database, email, slack, file, web, general)

• 📖 Security Policies: Comprehensive policies (data classification, access control, incident response)

💬 Prompts (2 total)

• 🔍 Security Review: Multi-step security review workflow

• ⚠️ Threat Analysis: STRIDE-based threat modeling and risk assessment

🎯 General

• ⚡ Fast & Lightweight: Built with TypeScript and Zod validation

• 🔧 Easy Integration: Works with any MCP-compatible AI assistant

• 🔗 API Integration: Connects to AIM Intelligence API for advanced analysis

• 📚 Comprehensive Documentation: Detailed guide for Tools, Resources, and Prompts

Installation

Installing via Smithery

To install aim-mcp for Claude Desktop automatically via Smithery:

NPX (Recommended)

Global Installation

Local Installation

Usage

As MCP Server

Add to your MCP client configuration:

Testing the Tools

Test AI Safety Guard

Test Text Guard

Test Security Prompt Enhancement

Available Tools

1. ai-safety-guard

Provides contextual security instructions and precautions for AI Agents before they interact with other MCPs.

Features: Context-aware guidelines, operation-specific warnings, red flag detection

2. aim-text-guard

Analyze text content for harmful or inappropriate content using AIM Intelligence API.

Features: Real-time analysis, harmful content detection, detailed JSON results

3. aim-security-prompt-tool

Enhance user prompts with security instructions for safer AI interactions.

Features: Multi-level enhancement, threat analysis, social engineering protection

4. prompt-injection-detector 🆕

Detect prompt injection attempts based on OWASP LLM01:2025 patterns.

Features:

• 15+ injection pattern detection (instruction override, role manipulation, jailbreak attempts)

• Risk scoring (0-100) with severity assessment

• OWASP LLM01:2025 compliant

• Configurable sensitivity levels

• Detailed threat reporting

5. credential-scanner 🆕

Scan text for exposed credentials including API keys, passwords, tokens, and SSH keys.

Features:

• 50+ credential patterns (AWS, GitHub, Google, OpenAI, Stripe, JWT, SSH keys)

• Automatic credential masking

• Risk level assessment

• Platform-specific detection (AWS, GitHub, Slack, databases)

• Actionable security recommendations

6. url-security-validator 🆕

Validate URL safety for phishing, malware, and security issues.

Features:

• 10+ security checks (protocol, TLD, IP address, homograph attacks)

• Phishing domain detection

• URL shortener identification

• Suspicious parameter detection

• HTTPS enforcement validation

Available Resources 🆕

Resources provide read-only security documentation and policies accessible via URI schemes.

Security Checklists

Access via security-checklist://[type]

• security-checklist://database - Database operations checklist

• security-checklist://email - Email operations checklist

• security-checklist://slack - Chat/messaging operations checklist

• security-checklist://file - File operations checklist

• security-checklist://web - Web request checklist

• security-checklist://general - General MCP operations checklist

Each checklist includes:

• Pre-operation checks

• During-operation guidelines

• Post-operation verification

• Red flags to abort operations

Security Policies

Access via security-policy://[type]

• security-policy://data-classification - Data classification levels and handling requirements

• security-policy://access-control - Access control principles and authentication requirements

• security-policy://incident-response - Incident response procedures and severity levels

Available Prompts 🆕

Prompts provide reusable workflow templates for complex security operations.

1. security-review

Comprehensive security review workflow for code, data, or configuration.

Workflow:

1. Credential scanning

2. Prompt injection detection (if applicable)

3. Security checklist consultation

4. Policy compliance review

5. Threat analysis

6. Risk assessment and recommendations

7. Summary table - Visual overview of all findings by severity

Summary Output Example:

2. threat-analysis

Analyze potential security threats using STRIDE methodology.

Framework:

1. Asset identification

2. STRIDE threat modeling (Spoofing, Tampering, Repudiation, Information Disclosure, DoS, Elevation of Privilege)

3. Risk assessment (likelihood × impact)

4. Attack vector analysis

5. Control gap identification

6. Mitigation strategies

7. Compliance considerations

8. Incident response planning

9. Summary table - Visual overview of all threats by severity

Summary Output Example:

Security Features

🛡️ AI Agent Protection

• MCP Interaction Safety: Contextual guidelines for different MCP types

• Operation Validation: Specific precautions for read/write/execute operations

• Data Sensitivity Handling: Protocols based on data classification levels

🔍 Content Analysis

• Real-time Threat Detection: Analyze content for harmful patterns

• Prompt Injection Detection: OWASP LLM01:2025 compliant pattern matching

• Credential Exposure Prevention: Scan for 50+ types of exposed secrets

• API-powered Analysis: Advanced AI-driven content safety assessment

🌐 URL Security

• Phishing Detection: Identify suspicious domains and homograph attacks

• HTTPS Enforcement: Validate secure protocol usage

• Malicious URL Blocking: Check against known threat indicators

📚 Policy & Compliance

• Security Checklists: Pre-built checklists for all MCP types

• Data Classification: Clear policies for handling sensitive data

• Access Control: Guidelines for authentication and authorization

• Incident Response: Structured procedures for security incidents

🔒 Workflow Orchestration

• Security Review Prompts: Multi-step review workflows

• Threat Analysis: STRIDE-based threat modeling

• Automated Audits: Combine multiple tools for comprehensive checks

Development

Deployment

This project uses automated CI/CD pipeline for seamless deployment to NPM.

Automatic Deployment

When you push to the main branch, GitHub Actions will automatically:

1. Build and Test: Compile TypeScript and run tests

2. Version Check: Compare current version with published version

3. Publish to NPM: Automatically publish if version has changed

4. Create Release: Generate GitHub release with version tag

Manual Version Management

Setting up NPM Token

To enable automatic deployment, add your NPM token to GitHub Secrets:

1. Go to npmjs.com and create an automation token

2. In your GitHub repository, go to Settings > Secrets and variables > Actions

3. Add a new secret named NPM_TOKEN with your NPM token value

Deployment Workflow

Contributing

1. Fork the repository

2. Create your feature branch (git checkout -b feature/amazing-feature)

3. Commit your changes (git commit -m 'Add some amazing feature')

4. Push to the branch (git push origin feature/amazing-feature)

5. Open a Pull Request

License

This project is licensed under the ISC License - see the LICENSE file for details.

Documentation

• 📚 MCP Components Guide: Comprehensive guide to Tools, Resources, and Prompts

• 📖 GitHub Wiki: Additional documentation and examples

• 🔍 MCP Specification: Official Model Context Protocol documentation

Support

• 📧 Email: support@aim-intelligence.com

• 🐛 Issues: GitHub Issues

• 💬 Discussions: GitHub Discussions

Made with ❤️ by AIM Intelligence