security MCP Server
Per-agent scoped MCP tool proxy — credential isolation, resource scoping, and audit logging for AI agent deployments
Discovered via github-topic:model-context-protocol and last synced 2mo ago.
1. Install the package
pip install scoped-mcp
scoped-mcp
— (dynamic; see module config)
—
0
`MATRIX_HOMESERVER`, `MATRIX_ACCESS_TOKEN`
RBAC
`SMTP_HOST`, `SMTP_PORT`, `SMTP_USER`, `SMTP_PASSWORD`
no
Required env vars
`GRAFANA_URL`, `GRAFANA_SERVICE_ACCOUNT_TOKEN`
`SLACK_WEBHOOK_URL`
Read tools
`DISCORD_WEBHOOK_URL`
`NTFY_URL`
token)\s*[:=]\s*\S+' fields: [path, query, body] action: block # or: warn decode: [base64, urlsafe_base64, url] # Optional: human-in-the-loop approval (requires state_backend.type: dragonfly) hitl: approval_required: ["filesystem_delete_*", "sqlite_execute"] shadow: ["mcp_proxy.*"] # log-only, return synthetic empty success timeout_seconds: 300 notify: type: ntfy # or: log (default), webhook, matrix topic: homelab-hitl ``` ### Environment Variable Substitution Manifest fields support `${VAR_NAME}` placeholders, expanded from the process environment before YAML parsing: ```yaml state_backend: type: dragonfly url: "redis://:${REDIS_PASSWORD}@host:6379/0" # always quote substitution sites credentials: source: file path: "${SECRETS_FILE}" ``` Rules: - Only the braced form is expanded (`${VAR}`, not `$VAR`) to prevent accidental substitution. - Undefined variables at startup are a hard error — the agent will not start with incomplete config. - Expanded values are never written to audit or ops logs. - **Always YAML-quote fields receiving substitution** — a secret value containing `:`, `{`, or `}` can corrupt the YAML structure if the field is unquoted. ### Top-Level Fields and Strict Validation The top-level manifest model rejects unknown fields (`extra="forbid"`). A misspelled or stale key fails the manifest at load time rather than being silently ignored — a deliberate guard against shadowing attacks, where an unrecognized field could mask a real setting. Every field an agent platform attaches to its manifests must therefore be modeled explicitly. Alongside the operational fields (`modules`, `credentials`, `state_backend`, `rate_limits`, `argument_filters`, `response_filters`, `hitl`, `audit`), the model accepts three **platform-metadata** fields. scoped-mcp validates and stores them but does not act on them — they are consumed by the task dispatcher, agent bus, and other agents on the platform:
`INFLUXDB_URL`, `INFLUXDB_TOKEN`
per-profile
—
Kong MCP
no (containers)
0
Purpose
string
`{auto_approved: [...], needs_approval: [...]}`
list of entries (below)
Type
string
`readonly` \
bool
bool
Forward tool calls to an upstream MCP server (HTTP or stdio)
RBAC
yes
真实性验证技能。分析用户提供的信息、消息、图片或内容，判断其真实性和可信度，识别虚假信息、AI生成内容或伪造内容。
Container escape is a critical attack technique where an adversary breaks out of container isolation to access the host system or other containers. Detection involves monitoring for escape indicators
Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS
Implements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, network connection observability, file access auditing, and runtime enforcement. Covers TracingPolicy CRD authoring with kprobe/tracepoint hooks, in-kernel filtering via matchArgs/matchBinaries selectors, JSON event export, and integration with SIEM pipelines. Use when building kernel-level runtime security observability for Linux hosts or Kubernetes clusters.
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️
A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
Learn how to use the absolute-audit Claude skill. Complete guide with installation instructions and examples.
Learn how to use the token-scam-analysis Claude skill. Complete guide with installation instructions and examples.
Learn how to use the absolute-upgrade Claude skill. Complete guide with installation instructions and examples.