{"name":"io.github.tomjwxf/protect-mcp","slug":"tomjwxf-protect-mcp","title":null,"description":"Signed receipts and Cedar policies for AI agent tool calls. Claude Code hooks, MCP gateway.","url":"https://mcp.market/server/tomjwxf-protect-mcp","rating":null,"grade":"C","score":60,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":25,"stars":9,"forks":4,"downloads_week":null,"last_push_at":"2026-09-17T10:50:35.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/scopeblind/scopeblind-gateway","website":null,"version":"0.5.3","remotes":[],"packages":[{"registryType":"npm","identifier":"protect-mcp","version":"0.5.3","transport":{"type":"stdio"}}],"tools":[{"name":"delete_file","description":"Delete a file from the filesystem","write_action":true,"price_micros":0,"input_schema":null},{"name":"deploy","description":"Deploy the application to production","write_action":true,"price_micros":0,"input_schema":null},{"name":"read_file","description":"Read the contents of a file","write_action":false,"price_micros":0,"input_schema":null},{"name":"web_search","description":"Search the web for information","write_action":false,"price_micros":0,"input_schema":null},{"name":"write_file","description":"Write content to a file","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":60,"grade":"C","scanned_at":"2026-09-27T23:16:30.264Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T23:16:30.166Z","components":{"code":{"score":8,"max":25,"notes":["37 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 11 days ago"]},"identity":{"score":4,"max":10,"notes":["namespace and repository owner differ"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/chunk-SU2FZH7U.mjs: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…"},{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/index.js: … = await import(\"child_process\"); execSync(`docker rm -f ${sandbox.id} 2>/dev/null`, { stdio: \"pipe…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"protect-mcp","version":"0.5.3","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":1,"publishedAt":"2026-04-05T05:14:27.816Z","repositoryUrl":"git+https://github.com/scopeblind/scopeblind-gateway.git"}],"repo":{"found":true,"owner":"scopeblind","repo":"scopeblind-gateway","archived":false,"pushedAt":"2026-09-17T10:50:35Z","stars":9,"forks":4,"openIssues":2,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/271959651?v=4","ownerCreatedAt":"2026-03-29T12:29:25Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/271959651?v=4&s=128","source":"github"},"presence":{"stars":9,"forks":4,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-09-17T10:50:35.000Z","score":25}}}},"grade_history":[],"reviews":[]}