@jacobmolz/mcpguard 0.1.0 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +17 -18
- package/package.json +4 -2
package/README.md
CHANGED
|
@@ -27,7 +27,7 @@ MCP-Guard sits between your MCP client (Cursor, Claude Desktop, Claude Code, VS
|
|
|
27
27
|
## Quick Start
|
|
28
28
|
|
|
29
29
|
```bash
|
|
30
|
-
npm install -g
|
|
30
|
+
npm install -g @jacobmolz/mcpguard
|
|
31
31
|
```
|
|
32
32
|
|
|
33
33
|
### Option A: Auto-discover existing configs
|
|
@@ -91,32 +91,31 @@ Config merge uses **floor-based semantics**: personal configs can restrict but n
|
|
|
91
91
|
|
|
92
92
|
## Benchmark Results
|
|
93
93
|
|
|
94
|
-
The benchmark suite tests
|
|
94
|
+
The benchmark suite tests 7,095 attack scenarios across 10 categories and 10,168 legitimate requests.
|
|
95
95
|
|
|
96
96
|
| Metric | Result | Target | Status |
|
|
97
97
|
|--------|--------|--------|--------|
|
|
98
|
-
| Detection rate |
|
|
98
|
+
| Detection rate | 97.0% | >95% | Pass |
|
|
99
99
|
| False positive rate | 0.000% | <0.1% | Pass |
|
|
100
|
-
|
|
|
101
|
-
|
|
|
102
|
-
| Throughput | 7,042 req/s | — | — |
|
|
100
|
+
| Audit integrity | Pass | No raw PII in logs | Pass |
|
|
101
|
+
| p50 latency overhead | 0.17ms | <5ms | Pass |
|
|
103
102
|
|
|
104
103
|
### Per-Category Detection
|
|
105
104
|
|
|
106
105
|
| Category | Rate | Status |
|
|
107
106
|
|----------|------|--------|
|
|
108
|
-
|
|
|
109
|
-
|
|
|
110
|
-
| Sampling injection | 100% | Pass |
|
|
111
|
-
| Config override | 100% | Pass |
|
|
112
|
-
|
|
|
113
|
-
|
|
|
114
|
-
|
|
|
115
|
-
| PII
|
|
116
|
-
| PII
|
|
117
|
-
|
|
|
118
|
-
|
|
119
|
-
>
|
|
107
|
+
| PII response leak | 100.0% | Pass |
|
|
108
|
+
| Auth bypass | 100.0% | Pass |
|
|
109
|
+
| Sampling injection | 100.0% | Pass |
|
|
110
|
+
| Config override | 100.0% | Pass |
|
|
111
|
+
| Permission bypass | 98.9% | Pass |
|
|
112
|
+
| Capability probe | 97.4% | Pass |
|
|
113
|
+
| Resource traversal | 95.4% | Pass |
|
|
114
|
+
| PII evasion | 94.7% | Pass |
|
|
115
|
+
| PII request leak | 93.8% | Pass |
|
|
116
|
+
| Rate limit evasion | 92.4% | Pass |
|
|
117
|
+
|
|
118
|
+
> Full-suite results from `pnpm benchmark`. Quick mode (`pnpm benchmark:quick`) uses stratified sampling and typically reports ~89-93% detection. See [latest report](benchmarks/results/REPORT.md) for charts.
|
|
120
119
|
|
|
121
120
|
## CLI Reference
|
|
122
121
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@jacobmolz/mcpguard",
|
|
3
|
-
"version": "0.1
|
|
3
|
+
"version": "0.2.1",
|
|
4
4
|
"description": "Security proxy daemon for MCP servers — adds auth, rate limiting, PII detection, and audit logging",
|
|
5
5
|
"author": "Jacob Molz",
|
|
6
6
|
"license": "MIT",
|
|
@@ -48,7 +48,7 @@
|
|
|
48
48
|
"benchmark:security": "tsx benchmarks/runner.ts --suite security",
|
|
49
49
|
"benchmark:legitimate": "tsx benchmarks/runner.ts --suite legitimate",
|
|
50
50
|
"benchmark:performance": "tsx benchmarks/runner.ts --suite performance",
|
|
51
|
-
"prepublishOnly": "pnpm
|
|
51
|
+
"prepublishOnly": "pnpm build"
|
|
52
52
|
},
|
|
53
53
|
"dependencies": {
|
|
54
54
|
"@modelcontextprotocol/sdk": "^1.12.1",
|
|
@@ -64,8 +64,10 @@
|
|
|
64
64
|
"@types/better-sqlite3": "^7.6.13",
|
|
65
65
|
"@types/js-yaml": "^4.0.9",
|
|
66
66
|
"@types/node": "^22.15.2",
|
|
67
|
+
"conventional-changelog-conventionalcommits": "^9.3.1",
|
|
67
68
|
"eslint": "^9.25.0",
|
|
68
69
|
"prettier": "^3.5.3",
|
|
70
|
+
"semantic-release": "^25.0.3",
|
|
69
71
|
"tsup": "^8.4.0",
|
|
70
72
|
"tsx": "^4.19.4",
|
|
71
73
|
"typescript": "^5.8.3",
|