arrowhead

jagguvarma15/arrowhead

★ 0 stars Python Security Updated today

Arrowhead is a hardened, general-purpose MCP server built to demonstrate, not just document, best-practice Model Context Protocol security: OAuth 2.1 auth, SSRF and path-traversal protection, sandboxed tool execution, and token-efficient schema design, all in working code.

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "arrowhead": {
      "command": "uvx",
      "args": [
        "arrowhead"
      ]
    }
  }
}

Or install with pip: pip install arrowhead

README Excerpt

Arrowhead is a hardened, general-purpose [Model Context Protocol](https://modelcontextprotocol.io) server. It exists to demonstrate best-practice MCP security in working code rather than prose: OAuth 2.1 authorization, SSRF and path-traversal defenses, sandboxed evaluation, per-caller rate limiting, structured audit logging, and

Tools (14)

ARROWHEAD_AUTHZ_POLICYARROWHEAD_AUTH_ENABLEDARROWHEAD_DISABLED_TOOLSARROWHEAD_DOCS_ROOTARROWHEAD_JAIL_ROOTARROWHEAD_REDIS_URLARROWHEAD_TRANSPORTcalculatedocumentshttpread_filesafe_fetchsandboxstdio

arrowhead

Quick Install

README Excerpt

Tools (14)

Related Security Servers