Skip to main content
Glama
deenesjakoruzh
wwb-bill

mcp-supply-guard

by wwb-bill
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

🧬 mcp-supply-guard

Python License CI No Dependencies

MCP 工具定义供应链完整性。 2026 年安全数据点：43% 的 MCP 服务器存在命令注入漏洞，且工具定义在批准后可能发生变异——这是一种拉地毯向量。该库在审查后锁定工具定义内容哈希的基线，然后在后续加载时进行验证：标记新增/移除/修改的工具，并对命令执行危险信号进行风险扫描。

零依赖。纯 Python 标准库。

快速开始

pip install mcp-supply-guard

Related MCP server: commit-check-mcp

用法

from mcp_supply_guard import load_tools, fingerprint, verify, scan_risk

baseline = [fingerprint(t) for t in load_tools("approved.json")]  # lock after review
report = verify(load_tools("current.json"), baseline)
print(report.clean)          # False if any tool added/modified
for f in report.findings:
    print(f.kind, f.tool, f.message)

risks = scan_risk(load_tools("current.json"))

CLI

mcp-supply-guard lock approved.json baseline.json
mcp-supply-guard verify current.json baseline.json --json    # CI exit 1 on added/modified
mcp-supply-guard risk current.json --json

tools.json

{"tools": [{"name": "search", "description": "Search the index",
            "inputSchema": {"type": "object", "properties": {"q": {"type": "string"}}}}]}

发现结果

类型

严重性

含义

added

错误

基线锁定后新增了工具

modified

错误

定义哈希已更改（拉地毯向量）

removed

警告

基线工具现在缺失

risky

错误/警告

描述/模式中存在命令执行危险信号

许可证

MIT © wwb-bill

This server cannot be deployed

Shareable, User-Owned Context BackendPeople, applications, and agents read, write, and coordinate together in one context lake. Reach it over MCP, a CLI, a Python SDK, or REST.fulcradynamics.comAd

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • heddle

    goweft
    A
    license
    Not graded
    quality
    A
    maintenance
    Enables users to define and run MCP tools using declarative YAML configs with built-in trust enforcement, credential brokering, and tamper-evident audit logging.
    13
    MIT
  • commit-check-mcp by commit-check

    commit-check-mcpofficial

    commit-check
    A
    license
    A
    quality
    A
    maintenance
    Enables validation of commit messages, branch names, author info, push safety, and repository state using commit-check rules, accessible as MCP tools.
    8
    31 PyPI
    1
    MIT

  • mcp-sentinel

    IronNathanAlvares
    A
    license
    Not graded
    quality
    B
    maintenance
    A continuous, out-of-band trust and reliability layer for the MCP ecosystem. It fingerprints MCP server tool definitions, detects and classifies drift (e.g., rug pulls) via a severity taxonomy, maintains a hash-chained evidence ledger, and gates CI with SARIF—while also acting as an MCP server itself so agents can check a server's safety before binding.
    Apache 2.0

  • eidolon-gateway

    gegane-lutshaba
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to govern downstream tool servers by enforcing default-deny authority and attestation on every tool call, with live monitoring, approval, and mid-session revocation.
    3
    Apache 2.0