SUNGLASSES MCP server

SUNGLASSES

<!-- mcp-name: io.github.sunglasses-dev/sunglasses -->

Open source input firewall for AI agents, beta. A local scanner checks text, code, PDFs, images, QR codes, audio and video with 1,569 patterns across 117 categories and reports findings and incomplete scans. A Claude Code hook blocks secret material in tool calls and the paths and hosts your policy lists, before a tool runs, best effort under its 10 second timeout.

What works today

approves the server at an interactive terminal. Once approved, it withholds a credential in a tool call or in a tool result, which is the credential lane and not general inspection of everything a tool returns. Installing it is not protection on its own. See What the proxy enforces.

• Scan text, files, PDFs, images and QR codes from the CLI or from Python
• An MCP server your agent calls, and a GitHub Action that scans every pull request
• A Claude Code hook that blocks the credential paths and policy violations your policy lists, before a tool runs
• A local MCP proxy that refuses every tools/list and tools/call until a person

• Outside that lane this reads input, so a clean result is a confidence floor and not a guarantee

Sunglasses is a local, open-source scanner for text and supported files. It reports what it matched and what it could not read, so you can decide what to pass onward. It produces findings and an exit status; a CI job, a Claude Code hook or your own code acts on that result.

Sixty seconds

python3 -m venv .venv && source .venv/bin/activate
python -m pip install --upgrade sunglasses
curl -fsSL -o sixty-seconds.sh https://raw.githubusercontent.com/sunglasses-dev/sunglasses/main/demo/sixty-seconds.sh && bash sixty-seconds.sh

An activated virtualenv keeps the install and the sunglasses your shell resolves in the same environment, and --upgrade matters if you already have an older version. curl -fsSL fails on an HTTP error instead of saving the error page, so the script only runs if the download actually succeeded.

The script writes three fixture files into a temp directory, and deliberately scans a fourth path that does not exist, five scanner invocations in total, because the archive is scanned twice (human output and JSON). The script's own commands execute; scanned content stays data (it is never executed, and the ZIP is not extracted).

Abbreviated output, recorded on 0.5.6. Finding rows 2-5 are omitted below; timings and presentation are not shown because they vary:

$ sunglasses scan --file notes.md            # ordinary sprint notes
  PASS — No threats detected.
scanner exit code: 0

Shortened. The full README is on GitHub.