# plugins/config.yaml - Main plugin configuration file
# Plugin directories to scan
plugin_dirs:
- "plugins/native" # Built-in plugins
- "plugins/custom" # Custom organization plugins
- "/etc/mcpgateway/plugins" # System-wide plugins
# Global plugin settings
plugin_settings:
parallel_execution_within_band: true
plugin_timeout: 120
fail_on_plugin_error: false
enable_plugin_api: true
plugin_health_check_interval: 120
plugins:
# Argument Normalizer - stabilize inputs before anything else
- name: "ArgumentNormalizer"
kind: "plugins.argument_normalizer.argument_normalizer.ArgumentNormalizerPlugin"
description: "Normalizes Unicode, whitespace, casing, dates, and numbers in args"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["prompt_pre_fetch", "tool_pre_invoke"]
tags: ["normalize", "inputs", "whitespace", "unicode", "dates", "numbers"]
mode: "disabled"
priority: 40
conditions: []
config:
# Unicode
enable_unicode: true
unicode_form: "NFC"
remove_control_chars: true
# Whitespace
enable_whitespace: true
trim: true
collapse_internal: true
normalize_newlines: true
collapse_blank_lines: false
# Casing
enable_casing: false
case_strategy: "none" # none|lower|upper|title
# Dates
enable_dates: true
day_first: false
year_first: false
# Numbers
enable_numbers: true
decimal_detection: "auto" # auto|comma|dot
# Field overrides: customize per key pattern
field_overrides: []
# PII Filter Plugin - Run first with highest priority for security
- name: "PIIFilterPlugin"
kind: "plugins.pii_filter.pii_filter.PIIFilterPlugin"
description: "Detects and masks Personally Identifiable Information"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["prompt_pre_fetch", "prompt_post_fetch", "tool_pre_invoke", "tool_post_invoke"]
tags: ["security", "pii", "compliance", "filter", "gdpr", "hipaa"]
mode: "permissive" # enforce | permissive | disabled
priority: 50 # Lower number = higher priority (runs first)
conditions:
- prompts: [] # Empty list = apply to all prompts
server_ids: [] # Apply to all servers
tenant_ids: [] # Apply to all tenants
config:
# PII Detection Settings
detect_ssn: true
detect_credit_card: true
detect_email: true
detect_phone: false
detect_ip_address: false # Disabled for development
detect_aws_keys: true
detect_api_keys: true
# Masking Settings
default_mask_strategy: "partial" # redact | partial | hash | tokenize | remove
redaction_text: "[PII_REDACTED]"
# Behavior Settings
block_on_detection: false # Set to true for strict compliance
log_detections: true
include_detection_details: true
# Whitelist common test values
whitelist_patterns:
- "test@example.com"
- "555-555-5555"
# Self-contained Search Replace Plugin
- name: "ReplaceBadWordsPlugin"
kind: "plugins.regex_filter.search_replace.SearchReplacePlugin"
description: "A plugin for finding and replacing words."
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["prompt_pre_fetch", "prompt_post_fetch", "tool_pre_invoke", "tool_post_invoke"]
tags: ["plugin", "transformer", "regex", "search-and-replace", "pre-post"]
mode: "permissive" # enforce | permissive | disabled
priority: 150
conditions:
# Apply to specific tools/servers
- prompts: ["test_prompt"]
server_ids: [] # Apply to all servers
tenant_ids: [] # Apply to all tenants
config:
words:
- search: crap
replace: crud
- search: crud
replace: yikes
# Deny List
- name: "DenyListPlugin"
kind: "plugins.deny_filter.deny.DenyListPlugin"
description: "A plugin that implements a deny list filter."
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["prompt_pre_fetch"]
tags: ["plugin", "filter", "denylist", "pre-post"]
mode: "disabled" # enforce | permissive | disabled
priority: 100
conditions:
# Apply to specific tools/servers
- prompts: ["test_prompt"]
server_ids: [] # Apply to all servers
tenant_ids: [] # Apply to all tenants
config:
words:
- innovative
- groundbreaking
- revolutionary
# Resource Filter Plugin - Example of resource hooks
- name: "ResourceFilterExample"
kind: "plugins.resource_filter.resource_filter.ResourceFilterPlugin"
description: "Demonstrates resource pre/post fetch hooks for filtering and validation"
version: "1.0.0"
author: "MCP Gateway Team"
hooks: ["resource_pre_fetch", "resource_post_fetch", "prompt_post_fetch", "tool_post_invoke"]
tags: ["resource", "filter", "security", "example"]
mode: "disabled" # Block resources that violate rules
priority: 75
conditions: [] # Apply to all resources
config:
# Maximum content size in bytes (1MB)
max_content_size: 1048576
# Allowed protocols (removing file for testing)
allowed_protocols:
- test
- time
- timezone
- http
- https
# Blocked domains (examples)
blocked_domains:
- malicious.example.com
- untrusted-site.net
# Content filters to redact sensitive data
content_filters:
- pattern: "password\\s*[:=]\\s*\\S+"
replacement: "password: [REDACTED]"
- pattern: "api[_-]?key\\s*[:=]\\s*\\S+"
replacement: "api_key: [REDACTED]"
- pattern: "secret\\s*[:=]\\s*\\S+"
replacement: "secret: [REDACTED]"
# Safe HTML Sanitizer - strip XSS vectors, before HTML→Markdown
- name: "SafeHTMLSanitizer"
kind: "plugins.safe_html_sanitizer.safe_html_sanitizer.SafeHTMLSanitizerPlugin"
description: "Sanitize HTML to remove XSS vectors; optional text conversion"
version: "0.1.0"
author: "ContextForge"
hooks: ["resource_post_fetch"]
tags: ["security", "html", "xss", "sanitize"]
mode: "disabled"
priority: 119
conditions: []
config:
allowed_tags: ["a", "p", "div", "span", "strong", "em", "code", "pre", "ul", "ol", "li", "h1", "h2", "h3", "h4", "h5", "h6", "blockquote", "img", "br", "hr", "table", "thead", "tbody", "tr", "th", "td"]
allowed_attrs:
"*": ["id", "class", "title", "alt"]
a: ["href", "rel", "target"]
img: ["src", "width", "height", "alt", "title"]
remove_comments: true
drop_unknown_tags: true
strip_event_handlers: true
sanitize_css: true
allow_data_images: false
remove_bidi_controls: true
to_text: false
# HTML → Markdown transformer for fetched HTML
- name: "HTMLToMarkdownPlugin"
kind: "plugins.html_to_markdown.html_to_markdown.HTMLToMarkdownPlugin"
description: "Converts HTML ResourceContent to Markdown"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["resource_post_fetch"]
tags: ["transform", "markdown", "html"]
mode: "disabled"
priority: 120
conditions: []
config: {}
# Rate limiter (fixed window, in-memory)
- name: "RateLimiterPlugin"
kind: "plugins.rate_limiter.rate_limiter.RateLimiterPlugin"
description: "Per-user/tenant/tool rate limits"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["prompt_pre_fetch", "tool_pre_invoke"]
tags: ["limits", "throttle"]
mode: "disabled"
priority: 20
conditions: []
config:
by_user: "60/m"
by_tenant: "600/m"
by_tool:
search: "10/m"
# Schema guard for tool args/results (subset JSONSchema)
- name: "SchemaGuardPlugin"
kind: "plugins.schema_guard.schema_guard.SchemaGuardPlugin"
description: "Validate tool args/results against simple schema"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["tool_pre_invoke", "tool_post_invoke"]
tags: ["schema", "validation"]
mode: "disabled"
priority: 110
conditions: []
config:
arg_schemas: {}
result_schemas: {}
block_on_violation: true
# SPARC Static Validator - Advanced tool call validation using ALTK
# Requires: pip install mcp-contextforge-gateway[altk]
- name: "SPARCStaticValidator"
kind: "plugins.sparc_static_validator.sparc_static_validator.SPARCStaticValidatorPlugin"
description: "SPARC static validation for tool call arguments using ALTK. Validates types, required params, enums, and constraints."
version: "0.1.0"
author: "Osher Elhadad"
hooks: ["tool_pre_invoke"]
tags: ["validation", "sparc", "altk", "static", "schema", "type-checking"]
mode: "enforce" # Enable with "enforce" or "permissive"
priority: 65 # Run early, after argument normalizer (40) but before schema guard (110)
conditions: []
config:
# Block tool execution when validation fails
block_on_violation: true
# Attempt automatic type conversion (e.g., "123" -> 123)
enable_type_correction: true
# Automatically apply type corrections to the payload
auto_apply_corrections: false
# Include corrected arguments in response metadata
include_correction_in_response: true
# Log when corrections are available or applied
log_corrections: true
# Optional per-tool schemas (overrides tool metadata)
# tool_schemas:
# my_tool:
# type: object
# required: [param1]
# properties:
# param1: {type: string}
# Cache idempotent tool results (write-through)
- name: "CachedToolResultPlugin"
kind: "plugins.cached_tool_result.cached_tool_result.CachedToolResultPlugin"
description: "Cache idempotent tool results in-memory"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["tool_pre_invoke", "tool_post_invoke"]
tags: ["cache", "performance"]
mode: "disabled"
priority: 130
conditions: []
config:
cacheable_tools: []
ttl: 300
key_fields: {}
# URL reputation static checks
- name: "URLReputationPlugin"
kind: "plugins.url_reputation.url_reputation.URLReputationPlugin"
description: "Blocks known-bad domains or patterns before fetch"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["resource_pre_fetch"]
tags: ["security", "url", "reputation"]
mode: "disabled"
priority: 60
conditions: []
config:
blocked_domains:
- malicious.example.com
blocked_patterns: []
# File type allowlist for resources
- name: "FileTypeAllowlistPlugin"
kind: "plugins.file_type_allowlist.file_type_allowlist.FileTypeAllowlistPlugin"
description: "Allow only configured file types for resource fetching"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["resource_pre_fetch", "resource_post_fetch"]
tags: ["security", "content", "mime"]
mode: "disabled"
priority: 65
conditions: []
config:
allowed_mime_types: ["text/plain", "text/markdown", "text/html", "application/json"]
allowed_extensions: [".md", ".txt", ".html", ".json"]
# Retry policy annotations
- name: "RetryWithBackoffPlugin"
kind: "plugins.retry_with_backoff.retry_with_backoff.RetryWithBackoffPlugin"
description: "Annotates retry/backoff policy in metadata"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["tool_post_invoke", "resource_post_fetch"]
tags: ["reliability", "retry"]
mode: "disabled"
priority: 170
conditions: []
config:
max_retries: 2
backoff_base_ms: 200
max_backoff_ms: 5000
retry_on_status: [429, 500, 502, 503, 504]
# Markdown cleaner
- name: "MarkdownCleanerPlugin"
kind: "plugins.markdown_cleaner.markdown_cleaner.MarkdownCleanerPlugin"
description: "Tidy Markdown formatting in prompts/resources"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["prompt_post_fetch", "resource_post_fetch"]
tags: ["markdown", "format"]
mode: "disabled"
priority: 140
conditions: []
config: {}
# JSON repair helper
- name: "JSONRepairPlugin"
kind: "plugins.json_repair.json_repair.JSONRepairPlugin"
description: "Attempts to repair nearly JSON outputs into valid JSON"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["tool_post_invoke"]
tags: ["json", "repair"]
mode: "disabled"
priority: 145
conditions: []
config: {}
# VirusTotal URL/Domain/IP/File checker
- name: "VirusTotalURLCheckerPlugin"
kind: "plugins.virus_total_checker.virus_total_checker.VirusTotalURLCheckerPlugin"
description: "Integrates with VirusTotal v3 to check URLs/domains/IPs and local files"
version: "0.1.0"
author: "Mihai Criveti"
hooks: ["resource_pre_fetch", "resource_post_fetch", "prompt_post_fetch", "tool_post_invoke"]
tags: ["security", "threat"]
mode: "disabled"
priority: 61
conditions: []
config:
enabled: true
api_key_env: "VT_API_KEY"
timeout_seconds: 8.0
check_url: true
check_domain: true
check_ip: true
scan_if_unknown: false
wait_for_analysis: false
max_wait_seconds: 8
poll_interval_seconds: 1.0
block_on_verdicts: ["malicious"]
min_malicious: 1
cache_ttl_seconds: 300
max_retries: 3
base_backoff: 0.5
max_delay: 8.0
jitter_max: 0.2
enable_file_checks: true
file_hash_alg: "sha256"
upload_if_unknown: false
upload_max_bytes: 10485760
scan_tool_outputs: true
max_urls_per_call: 5
url_pattern: "https?://[\\w\\-\\._~:/%#\\[\\]@!\\$&'\\(\\)\\*\\+,;=]+"
min_harmless_ratio: 0.0
scan_prompt_outputs: true
scan_resource_contents: true
allow_url_patterns: []
deny_url_patterns: []
allow_domains: []
deny_domains: []
allow_ip_cidrs: []
deny_ip_cidrs: []
override_precedence: "deny_over_allow"
# Code safety linter
- name: "CodeSafetyLinterPlugin"
kind: "plugins.code_safety_linter.code_safety_linter.CodeSafetyLinterPlugin"
description: "Detect unsafe code patterns in outputs"
version: "0.1.0"
author: "ContextForge"
hooks: ["tool_post_invoke"]
tags: ["security", "code"]
mode: "disabled"
priority: 155
conditions: []
config:
blocked_patterns:
- "\\beval\\s*\\("
- "\\bexec\\s*\\("
- "\\bos\\.system\\s*\\("
- "\\bsubprocess\\.(Popen|call|run)\\s*\\("
- "\\brm\\s+-rf\\b"
# Output Length Guard - enforce bounds or truncate tool outputs
- name: "OutputLengthGuardPlugin"
kind: "plugins.output_length_guard.output_length_guard.OutputLengthGuardPlugin"
description: "Guards tool outputs by enforcing min/max length; block or truncate"
version: "0.1.0"
author: "ContextForge"
hooks: ["tool_post_invoke"]
tags: ["guard", "length", "outputs", "truncate", "block"]
mode: "disabled" # use "enforce" with strategy: block for strict behavior
priority: 160 # run after other transformers
conditions: []
config:
min_chars: 0
max_chars: 15000
strategy: "truncate" # truncate | block
ellipsis: "…"
# Summarizer - summarize long content via OpenAI
- name: "Summarizer"
kind: "plugins.summarizer.summarizer.SummarizerPlugin"
description: "Summarize long text content using an LLM"
version: "0.1.0"
author: "ContextForge"
hooks: ["resource_post_fetch", "tool_post_invoke"]
tags: ["summarize", "llm", "content"]
mode: "disabled"
priority: 170
conditions: []
config:
provider: "openai"
openai:
api_base: "https://api.openai.com/v1"
api_key_env: "OPENAI_API_KEY"
model: "gpt-4o-mini"
temperature: 0.2
max_tokens: 512
use_responses_api: true
anthropic:
api_base: "https://api.anthropic.com/v1"
api_key_env: "ANTHROPIC_API_KEY"
model: "claude-3-5-sonnet-latest"
max_tokens: 512
temperature: 0.2
prompt_template: |
You are a helpful assistant. Summarize the following content succinctly
in no more than {max_tokens} tokens. Focus on key points, remove
redundancy, and preserve critical details.
include_bullets: true
language: null
threshold_chars: 800
hard_truncate_chars: 24000
tool_allowlist: ["search", "retrieve"]
resource_uri_prefixes: ["http://", "https://"]
# ClamAV Remote Scanner (external MCP) - DISABLED due to script path issue
# - name: "ClamAVRemote"
# kind: "external"
# description: "External ClamAV scanner (file/text) via MCP STDIO"
# version: "0.1.0"
# author: "Mihai Criveti"
# hooks: ["resource_pre_fetch", "resource_post_fetch"]
# tags: ["security", "malware", "clamav"]
# mode: "enforce"
# priority: 62
# mcp:
# proto: STDIO
# script: plugins/external/clamav_server/run.sh
# - name: "OPAPluginFilter"
# kind: "external"
# mode: "permissive" # Don't fail if the server is unavailable
# priority: 10 # adjust the priority
# mcp:
# proto: STREAMABLEHTTP
# url: http://127.0.0.1:8000/mcp
# # tls:
# # ca_bundle: /app/certs/plugins/ca.crt
# # client_cert: /app/certs/plugins/gateway-client.pem
# # verify: true
# Circuit Breaker - trip on high error rates or consecutive failures
- name: "CircuitBreaker"
kind: "plugins.circuit_breaker.circuit_breaker.CircuitBreakerPlugin"
description: "Trip per-tool breaker on high error rates; cooldown blocks"
version: "0.1.0"
author: "ContextForge"
hooks: ["tool_pre_invoke", "tool_post_invoke"]
tags: ["reliability", "sre"]
#mode: "enforce_ignore_error"
mode: "disabled"
priority: 70
conditions: []
config:
error_rate_threshold: 0.5
window_seconds: 60
min_calls: 10
consecutive_failure_threshold: 5
cooldown_seconds: 60
tool_overrides: {}
# Watchdog - enforce per-tool execution SLOs
- name: "Watchdog"
kind: "plugins.watchdog.watchdog.WatchdogPlugin"
description: "Enforce max runtime per tool; warn or block"
version: "0.1.0"
author: "ContextForge"
hooks: ["tool_pre_invoke", "tool_post_invoke"]
tags: ["latency", "slo"]
#mode: "enforce_ignore_error"
mode: "disabled"
priority: 85
conditions: []
config:
max_duration_ms: 30000
action: "warn"
tool_overrides: {}
# Robots and License Guard - respect robots/noai and license meta
- name: "RobotsLicenseGuard"
kind: "plugins.robots_license_guard.robots_license_guard.RobotsLicenseGuardPlugin"
description: "Honor robots/noai and license meta from HTML content"
version: "0.1.0"
author: "ContextForge"
hooks: ["resource_pre_fetch", "resource_post_fetch"]
tags: ["compliance", "robots", "license"]
mode: "disabled"
priority: 63
conditions: []
config:
user_agent: "MCP-Context-Forge/1.0"
respect_noai_meta: true
block_on_violation: true
license_required: false
allow_overrides: []
# Harmful Content Detector - keyword lexicons
- name: "HarmfulContentDetector"
kind: "plugins.harmful_content_detector.harmful_content_detector.HarmfulContentDetectorPlugin"
description: "Detect self-harm, violence, hate categories"
version: "0.1.0"
author: "ContextForge"
hooks: ["prompt_pre_fetch", "tool_post_invoke"]
tags: ["safety", "moderation"]
mode: "disabled"
priority: 96
conditions: []
config:
categories:
self_harm: ["\\bkill myself\\b", "\\bsuicide\\b", "\\bself-harm\\b", "\\bwant to die\\b"]
violence: ["\\bkill (?:him|her|them|someone)\\b", "\\bshoot (?:him|her|them|someone)\\b", "\\bstab (?:him|her|them|someone)\\b"]
hate: ["\\b(?:kill|eradicate) (?:[a-z]+) people\\b", "\\b(?:racial slur|hate speech)\\b"]
block_on: ["self_harm", "violence", "hate"]
# Timezone Translator - convert timestamps
- name: "TimezoneTranslator"
kind: "plugins.timezone_translator.timezone_translator.TimezoneTranslatorPlugin"
description: "Convert ISO-like timestamps between server and user timezones"
version: "0.1.0"
author: "ContextForge"
hooks: ["tool_pre_invoke", "tool_post_invoke"]
tags: ["localization", "timezone"]
#mode: "permissive"
mode: "disabled"
priority: 175
conditions: []
config:
user_tz: "America/New_York"
server_tz: "UTC"
direction: "to_user"
fields: ["start_time", "end_time"]
# AI Artifacts Normalizer - DISABLED due to syntax error in plugin
# - name: "AIArtifactsNormalizer"
# kind: "plugins.ai_artifacts_normalizer.ai_artifacts_normalizer.AIArtifactsNormalizerPlugin"
# description: "Normalize AI artifacts: smart quotes, ligatures, dashes, ellipses; remove bidi/zero-width; collapse spacing"
# version: "0.1.0"
# author: "ContextForge"
# hooks: ["prompt_pre_fetch", "resource_post_fetch", "tool_post_invoke"]
# tags: ["normalize", "unicode", "safety"]
# mode: "permissive"
# priority: 138
# conditions: []
# config:
# replace_smart_quotes: true
# replace_ligatures: true
# remove_bidi_controls: true
# collapse_spacing: true
# normalize_dashes: true
# normalize_ellipsis: true
# SQL Sanitizer - detect dangerous SQL patterns in inputs
- name: "SQLSanitizer"
kind: "plugins.sql_sanitizer.sql_sanitizer.SQLSanitizerPlugin"
description: "Detects risky SQL and optionally strips comments or blocks"
version: "0.1.0"
author: "ContextForge"
hooks: ["prompt_pre_fetch", "tool_pre_invoke"]
tags: ["security", "sql", "validation"]
# mode: "enforce"
mode: "disabled"
priority: 45
conditions: []
config:
fields: ["sql", "query", "statement"]
blocked_statements: ["\\bDROP\\b", "\\bTRUNCATE\\b", "\\bALTER\\b", "\\bGRANT\\b", "\\bREVOKE\\b"]
block_delete_without_where: true
block_update_without_where: true
strip_comments: true
require_parameterization: false
block_on_violation: true
# Secrets Detection - regex-based detector for common secrets/keys
- name: "SecretsDetection"
kind: "plugins.secrets_detection.secrets_detection.SecretsDetectionPlugin"
description: "Detects keys/tokens/secrets in inputs/outputs; optional redaction/blocking"
version: "0.1.0"
author: "ContextForge"
hooks: ["prompt_pre_fetch", "tool_post_invoke", "resource_post_fetch"]
tags: ["security", "secrets", "dlp"]
# mode: "enforce"
mode: "disabled"
priority: 51
conditions: []
config:
enabled:
aws_access_key_id: true
aws_secret_access_key: true
google_api_key: true
slack_token: true
private_key_block: true
jwt_like: true
hex_secret_32: true
base64_24: true
redact: false
redaction_text: "***REDACTED***"
block_on_detection: true
min_findings_to_block: 1
# Header Injector - add custom headers for resource fetch
- name: "HeaderInjector"
kind: "plugins.header_injector.header_injector.HeaderInjectorPlugin"
description: "Injects configured HTTP headers into resource fetch metadata"
version: "0.1.0"
author: "ContextForge"
hooks: ["resource_pre_fetch"]
tags: ["headers", "network", "enhancement"]
# mode: "permissive"
mode: "disabled"
priority: 58
conditions: []
config:
headers:
User-Agent: "MCP-Context-Forge/1.0"
uri_prefixes: []
# Privacy Notice Injector - append a compliance notice to prompts
- name: "PrivacyNoticeInjector"
kind: "plugins.privacy_notice_injector.privacy_notice_injector.PrivacyNoticeInjectorPlugin"
description: "Injects a configurable privacy notice into rendered prompts"
version: "0.1.0"
author: "ContextForge"
hooks: ["prompt_post_fetch"]
tags: ["compliance", "notice", "prompt"]
# mode: "permissive"
mode: "disabled"
priority: 90
conditions: []
config:
notice_text: "Privacy notice: Do not include PII, secrets, or confidential information in prompts or outputs."
placement: "append"
marker: "[PRIVACY]"
# Response Cache by Prompt - advisory cosine-similarity cache hints
- name: "ResponseCacheByPrompt"
kind: "plugins.response_cache_by_prompt.response_cache_by_prompt.ResponseCacheByPromptPlugin"
description: "Advisory cache via cosine similarity over configured fields"
version: "0.1.0"
author: "ContextForge"
hooks: ["tool_pre_invoke", "tool_post_invoke"]
tags: ["performance", "cache", "similarity"]
# mode: "permissive"
mode: "disabled"
priority: 128
conditions: []
config:
cacheable_tools: ["search", "retrieve"]
fields: ["prompt", "input", "query"]
ttl: 900
threshold: 0.9
max_entries: 2000
# Code Formatter - normalize whitespace/tabs/newlines; optional JSON pretty-print
- name: "CodeFormatter"
kind: "plugins.code_formatter.code_formatter.CodeFormatterPlugin"
description: "Formats code/text outputs (indentation, trailing whitespace, newline, JSON pretty-print)"
version: "0.1.0"
author: "ContextForge"
hooks: ["tool_post_invoke", "resource_post_fetch"]
tags: ["format", "enhancement", "postprocess"]
# mode: "permissive"
mode: "disabled"
priority: 180
conditions: []
config:
languages: ["plaintext", "python", "javascript", "typescript", "json", "markdown", "shell"]
tab_width: 4
trim_trailing: true
ensure_newline: true
dedent_code: true
format_json: true
format_code_fences: true
max_size_kb: 1024
# License Header Injector - add license header to code outputs
- name: "LicenseHeaderInjector"
kind: "plugins.license_header_injector.license_header_injector.LicenseHeaderInjectorPlugin"
description: "Injects a license header using language-appropriate comments"
version: "0.1.0"
author: "ContextForge"
hooks: ["tool_post_invoke", "resource_post_fetch"]
tags: ["compliance", "license", "format"]
# mode: "permissive"
mode: "disabled"
priority: 185
conditions: []
config:
header_template: |
SPDX-License-Identifier: Apache-2.0
Copyright (c) 2025
languages: ["python", "javascript", "typescript", "go", "java", "c", "cpp", "shell"]
max_size_kb: 512
dedupe_marker: "SPDX-License-Identifier:"
# Citation Validator - validate links (after HTML conversion)
- name: "CitationValidator"
kind: "plugins.citation_validator.citation_validator.CitationValidatorPlugin"
description: "Validates citations/links by checking status and keywords"
version: "0.1.0"
author: "ContextForge"
hooks: ["resource_post_fetch", "tool_post_invoke"]
tags: ["citation", "links", "validation"]
# mode: "permissive"
mode: "disabled"
priority: 122
conditions: []
config:
fetch_timeout: 6.0
require_200: true
content_keywords: []
max_links: 20
block_on_all_fail: false
block_on_any_fail: false
user_agent: "MCP-Context-Forge/1.0 CitationValidator"
# Vault Plugin - Generates bearer tokens from vault-saved tokens
- name: "VaultPlugin"
kind: "plugins.vault.vault_plugin.Vault"
description: "Generates bearer tokens based on vault-saved tokens"
version: "0.0.1"
author: "Adrian Popa"
hooks: ["tool_pre_invoke"]
tags: ["security", "vault", "OAUTH2"]
# mode: "permissive"
mode: "permissive"
priority: 10
conditions:
- prompts: []
server_ids: []
tenant_ids: []
config:
system_tag_prefix: "system"
vault_header_name: "X-Vault-Tokens"
vault_handling: "raw"
system_handling: "tag"
# Webhook Notification Plugin - Send HTTP notifications on events
- name: "WebhookNotification"
kind: "plugins.webhook_notification.webhook_notification.WebhookNotificationPlugin"
description: "Send HTTP webhook notifications on events, violations, and state changes"
version: "1.0.0"
author: "Manav Gupta"
hooks: ["tool_pre_invoke", "tool_post_invoke", "prompt_post_fetch", "resource_post_fetch"]
tags: ["notification", "webhook", "monitoring", "observability"]
# mode: "permissive"
mode: "disabled"
priority: 900 # Run after other plugins to capture their violations
conditions: []
config:
webhooks:
# Webhook.site for testing - UPDATE WITH YOUR UNIQUE URL
- url: "https://webhook.site/38df7ac1-672a-4e49-9b55-3c0ed469e9d0"
events: ["violation", "tool_success", "tool_error", "rate_limit_exceeded", "pii_detected"]
authentication:
type: "none"
retry_attempts: 2
retry_delay: 1000
timeout: 10
enabled: true
# Simple default template
default_template: |
{
"event": "{{event}}",
"plugin": "{{plugin_name}}",
"timestamp": "{{timestamp}}",
"request_id": "{{request_id}}",
"user": "{{user}}",
"tenant_id": "{{tenant_id}}",
"violation": {{violation}},
"metadata": {{metadata}}
}
include_payload_data: false
max_payload_size: 1000
# Content Moderation Plugin - AI-powered content safety using IBM, OpenAI, Azure, AWS
- name: "ContentModeration"
kind: "plugins.content_moderation.content_moderation.ContentModerationPlugin"
description: "Advanced content moderation using AI services (IBM Watson, IBM Granite Guardian, OpenAI, Azure, AWS)"
version: "1.0.0"
author: "Manav Gupta"
hooks: ["prompt_pre_fetch", "tool_pre_invoke", "tool_post_invoke"]
tags: ["safety", "moderation", "content", "ai", "ibm", "watson", "granite"]
# mode: "permissive" # Use permissive mode for testing
mode: "disabled"
priority: 30 # Run early in the pipeline
conditions: []
config:
provider: "ibm_granite" # Use Granite for easier testing (no API key needed)
fallback_provider: null
fallback_on_error: "warn" # Action when providers fail
# IBM Granite Guardian via Ollama (for testing)
ibm_granite:
ollama_url: "http://localhost:11434"
model: "granite3-guardian"
temperature: 0.1
timeout: 30
# IBM Watson Natural Language Understanding (requires API key)
# ibm_watson:
# api_key: "${env.IBM_WATSON_API_KEY}"
# url: "${env.IBM_WATSON_URL}"
# version: "2022-04-07"
# language: "en"
# timeout: 30
# Category thresholds and actions
categories:
hate:
threshold: 0.7
action: "warn" # Use warn for testing
violence:
threshold: 0.8
action: "warn"
sexual:
threshold: 0.6
action: "warn"
self_harm:
threshold: 0.5
action: "warn"
harassment:
threshold: 0.7
action: "warn"
profanity:
threshold: 0.6
action: "redact"
toxic:
threshold: 0.7
action: "warn"
# General settings
audit_decisions: true
include_confidence_scores: true
enable_caching: true
cache_ttl: 3600
max_text_length: 10000
# ALTK: JSON Processor
- name: "ALTKJsonProcessor"
kind: "plugins.altk_json_processor.json_processor.ALTKJsonProcessor"
description: "Uses JSON Processor from ALTK to extract data from long JSON responses"
version: "0.1.0"
author: "Jason Tsay"
hooks: ["tool_post_invoke"]
tags: ["plugin"]
mode: "disabled" # enforce | permissive | disabled
priority: 150
conditions:
# Apply to specific tools/servers
- server_ids: [] # Apply to all servers
tenant_ids: [] # Apply to all tenants
config:
jsonprocessor_query: ""
llm_provider: "watsonx" # one of watsonx, ollama, openai, anthropic
watsonx: # each section of providers is optional
wx_api_key: "" # optional, can define WX_API_KEY instead
wx_project_id: "" # optional, can define WX_PROJECT_ID instead
wx_url: "https://us-south.ml.cloud.ibm.com"
ollama:
ollama_url: "http://localhost:11434"
openai:
api_key: "" # optional, can define OPENAI_API_KEY instead
anthropic:
api_key: "" # optional, can define ANTHROPIC_API_KEY instead
model_id: "ibm/granite-3-3-8b-instruct" # note that this changes depending on provider
length_threshold: 100000
# Tools Telemetry Exporter - export tool invocation telemetry to OpenTelemetry
- name: "ToolsTelemetryExporter"
kind: "plugins.tools_telemetry_exporter.telemetry_exporter.ToolsTelemetryExporterPlugin"
description: "Export comprehensive tool invocation telemetry to OpenTelemetry"
version: "0.1.0"
author: "Bar Haim"
hooks: ["tool_pre_invoke", "tool_post_invoke"]
tags: ["telemetry", "observability", "opentelemetry", "monitoring"]
mode: "disabled" # enforce | permissive | disabled
priority: 200 # Run late to capture all context
conditions: [] # Apply to all tools
config:
export_full_payload: true
max_payload_bytes_size: 10000
