Skip to main content
Glama
deenesjakoruzh
wwb-bill

mcp-supply-guard

by wwb-bill
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

🧬 mcp-supply-guard

Python License CI No Dependencies

Integridad de la cadena de suministro de definiciones de herramientas MCP. Dato de seguridad 2026: el 43% de los servidores MCP tienen vulnerabilidades de inyección de comandos, y las definiciones de herramientas pueden mutar después de la aprobación, un vector de "rug-pull". Esta biblioteca fija una línea base de hashes de contenido de definiciones de herramientas tras la revisión, luego verifica en cargas posteriores: señalando herramientas añadidas / eliminadas / modificadas, además de un escaneo de riesgo para señales de peligro de ejecución de comandos.

Cero dependencias. Solo stdlib de Python.

Inicio rápido

pip install mcp-supply-guard

Related MCP server: commit-check-mcp

Uso

from mcp_supply_guard import load_tools, fingerprint, verify, scan_risk

baseline = [fingerprint(t) for t in load_tools("approved.json")]  # lock after review
report = verify(load_tools("current.json"), baseline)
print(report.clean)          # False if any tool added/modified
for f in report.findings:
    print(f.kind, f.tool, f.message)

risks = scan_risk(load_tools("current.json"))

CLI

mcp-supply-guard lock approved.json baseline.json
mcp-supply-guard verify current.json baseline.json --json    # CI exit 1 on added/modified
mcp-supply-guard risk current.json --json

tools.json

{"tools": [{"name": "search", "description": "Search the index",
            "inputSchema": {"type": "object", "properties": {"q": {"type": "string"}}}}]}

Hallazgos

Kind

Severity

Meaning

added

error

herramienta añadida después de bloquear la línea base

modified

error

el hash de la definición cambió (vector rug-pull)

removed

warning

la herramienta de la línea base ahora falta

risky

error/warning

señales de peligro de ejecución de comandos en descripción/esquema

Licencia

MIT © wwb-bill

This server cannot be deployed

Shareable, User-Owned Context BackendPeople, applications, and agents read, write, and coordinate together in one context lake. Reach it over MCP, a CLI, a Python SDK, or REST.fulcradynamics.comAd

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • heddle

    goweft
    A
    license
    Not graded
    quality
    A
    maintenance
    Enables users to define and run MCP tools using declarative YAML configs with built-in trust enforcement, credential brokering, and tamper-evident audit logging.
    13
    MIT
  • commit-check-mcp by commit-check

    commit-check-mcpofficial

    commit-check
    A
    license
    A
    quality
    A
    maintenance
    Enables validation of commit messages, branch names, author info, push safety, and repository state using commit-check rules, accessible as MCP tools.
    8
    31 PyPI
    1
    MIT

  • mcp-sentinel

    IronNathanAlvares
    A
    license
    Not graded
    quality
    B
    maintenance
    A continuous, out-of-band trust and reliability layer for the MCP ecosystem. It fingerprints MCP server tool definitions, detects and classifies drift (e.g., rug pulls) via a severity taxonomy, maintains a hash-chained evidence ledger, and gates CI with SARIF—while also acting as an MCP server itself so agents can check a server's safety before binding.
    Apache 2.0

  • eidolon-gateway

    gegane-lutshaba
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to govern downstream tool servers by enforcing default-deny authority and attestation on every tool call, with live monitoring, approval, and mid-session revocation.
    3
    Apache 2.0