Fail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error.
registry version 0.32.4
npm
npx -y protect-mcpnpm
npx -y protect-mcp@0.32.4
Pick your client — the config below is generated for this server (local stdio). Copy respects the “Pin version” switch above.
claude_desktop_config.json
{
"mcpServers": {
"protect-mcp": {
"command": "npx",
"args": [
"-y",
"protect-mcp"
]
}
}
}{
"mcpServers": {
"protect-mcp": {
"command": "npx",
"args": [
"-y",
"protect-mcp@0.32.4"
]
}
}
}Format verified against the official Claude Desktop docs ↗.
terminal
claude mcp add protect-mcp -- npx -y protect-mcp
claude mcp add protect-mcp -- npx -y protect-mcp@0.32.4
Format verified against the official Claude Code docs ↗.
.cursor/mcp.json
{
"mcpServers": {
"protect-mcp": {
"command": "npx",
"args": [
"-y",
"protect-mcp"
]
}
}
}{
"mcpServers": {
"protect-mcp": {
"command": "npx",
"args": [
"-y",
"protect-mcp@0.32.4"
]
}
}
}Format verified against the official Cursor docs ↗.
.vscode/mcp.json
{
"servers": {
"protect-mcp": {
"command": "npx",
"args": [
"-y",
"protect-mcp"
]
}
}
}{
"servers": {
"protect-mcp": {
"command": "npx",
"args": [
"-y",
"protect-mcp@0.32.4"
]
}
}
}Format verified against the official VS Code docs ↗.
mcp_config.json
{
"mcpServers": {
"protect-mcp": {
"command": "npx",
"args": [
"-y",
"protect-mcp"
]
}
}
}{
"mcpServers": {
"protect-mcp": {
"command": "npx",
"args": [
"-y",
"protect-mcp@0.32.4"
]
}
}
}Format verified against the official Windsurf docs ↗.
⭐ 9 stars · 最近更新于 22 天前 · MIT license
protect mcp Fail closed Cedar policy gate plus signed receipts for AI agent tool calls. protect mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy, blocks what breaks the rules before it runs, and signs an offline verifiable Ed25519 receipt of…
Summary from the project README — github.com/ScopeBlind/scopeblind-gateway
Distributed as npm, listed under AI Agents. Review our MCP security guide before granting access to real data.
protect mcp Fail closed Cedar policy gate plus signed receipts for AI agent tool calls. protect mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy, blocks what breaks the rules before it runs, and signs an offline verifiable Ed25519 receipt of
Run the install command shown above, then paste the config for your client (Claude Desktop, Claude Code, Cursor, VS Code or Windsurf) into its MCP settings and restart the client.
The MCP server itself is free to install. The source is public on https://github.com/ScopeBlind/scopeblind-gateway. Any third-party service it calls may require its own API key and account.
Any MCP-compatible client can use it, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and custom agents.
Publish this server? Link back with a badge on your README or site — copy either snippet.
Markdown
[](https://mcpnav.net/server/protect-mcp/)
HTML
<a href="https://mcpnav.net/server/protect-mcp/"><img src="https://mcpnav.net/badge/protect-mcp.svg" alt="Listed on MCPNav" height="20"></a>