scopeblind-gateway

⚠️ 此仓库已迁移。 后续开发请移至 ScopeBlind/scopeblind-gateway 。 此个人分支可能落后于官方仓库。请使用组织仓库提交问题、拉取请求并获取最新代码。 protect-mcp MCP 服务器安全网关。默认以影子模式记录日志，支持按工具策略、可选的本地 Ed25519 签名收据，以及便于验证的审计输出。 当前 CLI 路径： 将任何 stdio MCP 服务器包装为透明代理。在影子模式下，它会记录所有 tools/call 请求并放行所有内容。添加策略文件以实施按工具规则。运行 protect-mcp init 生成本地签名密钥和配置，以便网关也能输出签名收据。...

scopeblind-gateway

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...

scopeblind-gateway v0.13.1

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...