Gsep MCP server
io.github.gsepcore/gsep-mcp·v1.0.0AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.
0 stars70 downloads/wk
Reviews
Write oneNobody has reviewed Gsep yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Gsep tools (6, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
gsep_chatwrite actionSend a message through the full GSEP pipeline. Runs C3 prompt injection scan, enhanced LLM call with evolved genes, C4 behavioral immune check, C5 action firewall, fitness tracking, and autonomous evolution. Returns the protected response.
gsep_get_statusGet genome health, fitness scores, drift status, evolution generation, and security stats. Omit genome_id to list all active genomes.
gsep_record_feedbackRecord user satisfaction feedback for a genome. Positive signals reinforce current gene configuration. Negative signals trigger evolution on the next cycle.
gsep_scan_actionsScan LLM response for dangerous or destructive actions with C5 Action Firewall (80+ patterns). Classifies actions as safe/caution/destructive/critical. Permanently blocks rm -rf, DROP DATABASE, disk wipes, etc.
gsep_scan_inputScan user input with C3 Content Firewall (53 patterns). Detects prompt injection, role hijacking, data exfiltration attempts, encoding evasion, and more. Use this before sending any external content to your LLM.
gsep_scan_outputScan LLM output with C4 Behavioral Immune System (6 checks). Detects if the response was infected by Indirect Prompt Injection — system prompt leakage, role confusion, data exfiltration patterns, and more.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan33 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 127 days ago8/15
- Maintainer identityregistry namespace matches repository owner7/10
How Gsep compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 71/100
- higher than 38% of 4,460 AI and agents servers
- Tools
- 6
- the typical AI and agents server has 6
- Tools that change things
- 17%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 70
- more than 54% of 1,538 AI and agents servers with a package
What its tools let an agent do: 5 read · 1 change
Install Gsep in Claude Code, Cursor or VS Code
Runs npx -y @gsep/mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add gsep-mcp -- npx -y @gsep/mcp
What the publisher says
From the Gsep repository's README, as published. We do not edit it. Read it on GitHub
GSEP-MCP — AI Agent Security via Model Context Protocol
The only MCP server that protects your AI agent instead of just extending it.
"me encanta saber que no borrará nada de mi pc" — First GSEP user, unprompted
Website · GSEP Core · npm · Discord
At a Glance
What is GSEP-MCP?
There are 9,400+ MCP servers. All of them give your agent new tools — Notion, GitHub, Slack, databases.
GSEP-MCP is different. It gives your agent security, safety, and self-improvement — without writing a single line of code.
OTHER MCP SERVERS GSEP-MCP
┌──────────────────┐ ┌──────────────────────────────┐
│ Give agent │ │ Protect agent from │
│ new tools │ vs │ prompt injection │
│ │ │ Block destructive actions │
│ More features │ │ Detect infected responses │
│ │ │ Self-evolving prompts │
└──────────────────┘ └──────────────────────────────┘Works with: Claude Desktop, Cursor, Windsurf, Cline, Continue, n8n, Make, any MCP client.
Integrations
GSEP-MCP supports two transports: stdio (for desktop apps and IDEs) and HTTP (for servers, backends, and automation platforms). Pick the one that matches your environment.
stdio Transport (Desktop / IDE)
stdio is the simplest transport. The MCP client launches GSEP-MCP as a subprocess and communicates via stdin/stdout. No port, no server, no network.
Claude Desktop
Add to ~/Library/Application Support/Claude/claudedesktopconfig.json:
{
"mcpServers": {
"gsep": {
"command": "npx",
"args": ["-y", "@gsep/mcp"],
"env": {
"ANTHROPIC_API_KEY": "sk-ant-..."
}
}
}
}Restart Claude Desktop. Your agent is now protected.
Cursor
Add to .cursor/mcp.json in your project (or global ~/.cursor/mcp.json):
{
"mcpServers": {
"gsep": {
"command": "npx",
"args": ["-y", "@gsep/mcp"],
"env": {
"ANTHROPIC_API_KEY": "sk-ant-..."
}
}
}
}Windsurf
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"gsep": {
"command": "npx",
"args": ["-y", "@gsep/mcp"],
"env": {
"ANTHROPIC_API_KEY": "sk-ant-..."
}
}
}
}Cline / Continue / Any MCP-compatible IDE
Add the same config block to your IDE's MCP settings file. GSEP-MCP is compatible with any client that implements the MCP protocol.
OpenClaw / Genome
{
"mcpServers": {
"gsep": {
"command": "npx",
"args": ["-y", "@gsep/mcp"],
"env": {
"ANTHROPIC_API_KEY": "sk-ant-...",
"GSEP_PRESET": "full"
}
}
}
}With Ollama (local models — no API key needed)
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Gsep: common questions
- Is Gsep MCP server safe?
- Mostly: it is graded B (71/100). Read the Gsep safety report
- How do I install Gsep?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Gsep need an API key?
- Yes. The registry entry asks for
ANTHROPIC_API_KEY,OPENAI_API_KEY. - Is Gsep maintained?
- The last commit was 164 days ago (2026-05-24). The latest release is v1.0.0.
- What can I use instead of Gsep?
- Servers from other publishers that do the same job: HOL Guard MCP server, Agent Security Scanner MCP server and Decionis MCP server.
- How does Gsep compare with other AI and agents MCP servers?
- safety score 71/100 (higher than 38% of 4,460 AI and agents servers); tools 6 (the typical AI and agents server has 6); tools that change things 17% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Gsep
Same job from other publishers: the closest match first, then the best rated.
- HOL GuardLocal-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.not reviewedEstablishedA
- Agent Security ScannerSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.not reviewedEstablishedC
- DecionisAuthorize consequential AI agent actions before executionnot reviewedEstablishedA
- Agent-Native ChatMinimal chat-first app with durable threads, actions, and the app-agent loopnot reviewedEstablishedA
- ImageAI image generation and editing with prompt optimization and quality presetsnot reviewedEstablishedB