security MCP Server
Local-first security middleware for MCP servers. Content scanning, prompt-injection defence, trust boundaries, manifest integrity, and audit trails. No API keys, no telemetry. OWASP MCP Top 10 aligned.
Discovered via github-topic:mcp-server and last synced 3mo ago.
1. Install the package
pip install mcp-parapet
How mcp-parapet addresses it
Block all tool calls
Audit log file path
Permissions
Read-only operations
Log level (DEBUG, INFO, WARNING, ERROR)
Standard operations *(default)*
Override PII policy
All operations including writes
Override secrets policy
Admin/system-level operations
Override injection policy
reject scan_tool_arguments: true scan_tool_responses: true audit: enabled: true log_file: parapet-audit.jsonl integrity: enabled: true alert_on_change: true block_on_change: false rate_limit: default_per_minute: 60 default_per_hour: 1000 servers: my-trusted-server: trust_level: trusted third-party-server: trust_level: basic allowed_tools: - search - read max_calls_per_minute: 10 ``` ### Environment Variables
Snyk Agent Scan (mcp-scan)
HMAC signing key for manifest integrity
What it catches
Path to config file
mcp-parapet is not a replacement for enterprise MCP gateways. If you need OAuth 2.1, SSO, multi-tenant RBAC, and managed cloud dashboards, use TrueFoundry or Lasso. If you need a free, local-first security layer that you can `pip install` and forget — that's mcp-parapet. ## CLI Reference ``` mcp-parapet wrap [--name NAME] [--config FILE] -- <command> [args...] mcp-parapet scan <file
真实性验证技能。分析用户提供的信息、消息、图片或内容，判断其真实性和可信度，识别虚假信息、AI生成内容或伪造内容。
Container escape is a critical attack technique where an adversary breaks out of container isolation to access the host system or other containers. Detection involves monitoring for escape indicators
Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS
Implements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, network connection observability, file access auditing, and runtime enforcement. Covers TracingPolicy CRD authoring with kprobe/tracepoint hooks, in-kernel filtering via matchArgs/matchBinaries selectors, JSON event export, and integration with SIEM pipelines. Use when building kernel-level runtime security observability for Linux hosts or Kubernetes clusters.
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️
A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
Learn how to use the absolute-audit Claude skill. Complete guide with installation instructions and examples.
Learn how to use the token-scam-analysis Claude skill. Complete guide with installation instructions and examples.
Learn how to use the absolute-upgrade Claude skill. Complete guide with installation instructions and examples.