Skip to main content
Glama
@shuliak-corp/sip1-mcp

@shuliak-corp/sip1-mcp

@shuliak-corp/sip1-mcp — SHULIAK SIP-1 v2.6 Zero-Egress AI & MCP Firewall

CERN Zenodo DOI npm version NIST CAVP

Author: Dmitrii Shuliak (Founder & Chief Systems Architect, SHULIAK CORP) Monograph & ARM64 Benchmark (CERN Zenodo): https://doi.org/10.5281/zenodo.24159380 Enterprise Portal, Live Sandbox & License Keys: https://shuliak.dev

Key Capabilities

  • 9/9 Official NIST SP 800-38G Rev. 1 (FF1) CAVP Test Vectors Verified: Bit-exact BigInt 10-round Feistel network with stateless Luhn Mod-10 & ISO/IEC 7064 IBAN bijections.

  • Dual-Mode MCP Architecture: Standalone MCP security server (npx -y @shuliak-corp/sip1-mcp) or transparent downstream stdio proxy (--wrap <cmd>).

  • OWASP MCP Top 10 Quarantine & EU AI Act CycloneDX AIBOM: Blocks path traversal, command injection, prototype pollution, and covert zero-width Unicode smuggled prompts.

Related MCP server: cyclops

Quickstart

npx -y @shuliak-corp/sip1-mcp --version
npm test

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      D
      maintenance
      Adaptive security for AI agents: assess inputs for prompt injection, scan outputs for credential/PII leaks, teach new attack patterns to semantic memory, harden prompts, and monitor metrics. Runs locally via MCP stdio.
      129 PyPI
      Apache 2.0
    • A
      license
      Not graded
      quality
      C
      maintenance
      A security MCP proxy that monitors and blocks data exfiltration between AI agents and their tools by detecting toxic flows (untrusted → sensitive → egress) deterministically with zero LLM calls in the decision path.
      1
      MIT
    • A
      license
      A
      quality
      B
      maintenance
      Enables sub-millisecond pre-execution safety filtering for AI agent tool calls, blocking destructive shell commands, dangerous SQL mutations, credential access, SSRF, and scope-creep or prompt-injection patterns before they execute, with optional fail-closed transparent proxy wrapping for any MCP server.
      6
      58 npm
      12
      Apache 2.0
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables MCP servers and local AI agents to safely interact with host environments by blocking indirect prompt injections, directory traversal, and malicious shell commands.
      MIT