@jrooig/mcpshield 0.1.0

package/dist/types/mcp.js

@@ -0,0 +1,97 @@
+/**
+ * JSON-RPC 2.0 & Model Context Protocol (MCP) type definitions.
+ *
+ * These types model the wire format that MCP-Shield intercepts on stdio:
+ * every packet exchanged between an MCP client (e.g. Claude Code) and an
+ * MCP server is a JSON-RPC 2.0 message, and MCP layers its own methods
+ * (`initialize`, `tools/call`, `resources/read`, ...) on top of it.
+ */
+// ---------------------------------------------------------------------------
+// JSON-RPC 2.0 base protocol
+// ---------------------------------------------------------------------------
+export const JSONRPC_VERSION = '2.0';
+/** Standard JSON-RPC 2.0 error codes, plus the code MCP-Shield uses for policy denials. */
+export const JsonRpcErrorCode = {
+    ParseError: -32700,
+    InvalidRequest: -32600,
+    MethodNotFound: -32601,
+    InvalidParams: -32602,
+    InternalError: -32603,
+    /** MCP-Shield policy denial. The spec reserves -32000..-32099 for implementation-defined server errors. */
+    AccessDenied: -32003,
+};
+// ---------------------------------------------------------------------------
+// MCP protocol layer
+// ---------------------------------------------------------------------------
+/** MCP methods relevant to interception. Servers may expose more; the firewall matches on these. */
+export const McpMethod = {
+    Initialize: 'initialize',
+    Initialized: 'notifications/initialized',
+    ToolsList: 'tools/list',
+    ToolsCall: 'tools/call',
+    ResourcesList: 'resources/list',
+    ResourcesRead: 'resources/read',
+    PromptsList: 'prompts/list',
+    PromptsGet: 'prompts/get',
+    Ping: 'ping',
+};
+// ---------------------------------------------------------------------------
+// Type guards — parsing untrusted stdio input safely
+// ---------------------------------------------------------------------------
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export function isJsonRpcMessage(value) {
+    return isRecord(value) && value['jsonrpc'] === JSONRPC_VERSION;
+}
+export function isJsonRpcRequest(value) {
+    return (isJsonRpcMessage(value) &&
+        'method' in value &&
+        typeof value.method === 'string' &&
+        'id' in value &&
+        (value.id === null ||
+            typeof value.id === 'string' ||
+            typeof value.id === 'number'));
+}
+export function isJsonRpcNotification(value) {
+    return (isJsonRpcMessage(value) &&
+        'method' in value &&
+        typeof value.method === 'string' &&
+        !('id' in value));
+}
+export function isJsonRpcResponse(value) {
+    return isJsonRpcMessage(value) && !('method' in value) && ('result' in value || 'error' in value);
+}
+export function isJsonRpcErrorResponse(value) {
+    return isJsonRpcResponse(value) && 'error' in value;
+}
+/** Narrow an intercepted packet down to the tool invocation the firewall must judge. */
+export function isToolCallRequest(value) {
+    return (isJsonRpcRequest(value) &&
+        value.method === McpMethod.ToolsCall &&
+        isRecord(value.params) &&
+        typeof value.params['name'] === 'string');
+}
+// ---------------------------------------------------------------------------
+// Response factories
+// ---------------------------------------------------------------------------
+/** Build the error response MCP-Shield returns to the client when a request is blocked by policy. */
+export function createAccessDeniedResponse(id, ruleName) {
+    return {
+        jsonrpc: JSONRPC_VERSION,
+        id,
+        error: {
+            code: JsonRpcErrorCode.AccessDenied,
+            message: 'Access Denied by Policy',
+            data: ruleName ? { rule: ruleName } : undefined,
+        },
+    };
+}
+export function createErrorResponse(id, code, message, data) {
+    return {
+        jsonrpc: JSONRPC_VERSION,
+        id,
+        error: { code, message, data },
+    };
+}
+//# sourceMappingURL=mcp.js.map

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@jrooig/mcpshield",
+  "publishConfig": { "access": "public" },
+  "version": "0.1.0",
+  "description": "Zero-trust security proxy and runtime firewall for MCP agents. Intercepts JSON-RPC 2.0 over stdio between MCP clients and servers.",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "mcp-shield": "dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "npm run build",
+    "build:bin": "esbuild src/index.ts --bundle --platform=node --target=node18 --format=cjs --outfile=dist/bundle.cjs && pkg dist/bundle.cjs --targets node18-win-x64,node18-macos-x64,node18-linux-x64 --out-path bin/",
+    "typecheck": "tsc --noEmit",
+    "test": "npm run build && node --test --test-force-exit \"tests/*.test.mjs\"",
+    "start": "node dist/index.js",
+    "dev": "node --loader ts-node/esm src/index.ts"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "security",
+    "firewall",
+    "proxy",
+    "json-rpc"
+  ],
+  "license": "MIT",
+  "repository": { "type": "git", "url": "git+https://github.com/jaumerohi2007-cell/mcp-shield.git" },
+  "homepage": "https://mcp-shield.dev",
+  "bugs": { "url": "https://github.com/jaumerohi2007-cell/mcp-shield/issues" },
+  "files": ["dist/**/*.js", "dist/**/*.d.ts", "README.md"],
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "express": "^5.2.1",
+    "socket.io": "^4.8.3"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.6",
+    "@types/node": "^26.1.0",
+    "esbuild": "^0.28.1",
+    "jsdom": "^29.1.1",
+    "pkg": "^5.8.1",
+    "socket.io-client": "^4.8.3",
+    "ts-node": "^10.9.2",
+    "typescript": "^6.0.3"
+  }
+}