mcpshield-runtime

mcpshieldvow/mcpshield-runtime

★ 0 stars Rust AI/LLM Updated today

Open-source Rust runtime sandbox for MCP servers — capability allowlists, outbound proxy filtering, DLP, HMAC policy snapshots, OTel GenAI telemetry. NSA May-2026 aligned.

View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcpshield-runtime": {
      "command": "cargo",
      "args": [
        "run",
        "--",
        "mcpshield-runtime"
      ]
    }
  }
}

README Excerpt

A Rust runtime sandbox for MCP (Model Context Protocol) servers. Drop-in wrapper that enforces capability allowlists, outgoing proxy filtering, and exports behavioral telemetry via OpenTelemetry GenAI semconv v1.36+. Aligned to NSA May-2026 MCP security guidance: sandboxing, DLP, outgoing proxy filtering, message integrity, and output filtering — all in a single `cargo add`.

Tools (5)

MCPSHIELD_API_URLMCPSHIELD_LOGMCPSHIELD_SERVER_CLASSMCPSHIELD_SERVER_IDMCPSHIELD_TOKEN

Topics

dlpllm-securitymcpmodel-context-protocolopentelemetryrustsandboxsecurity

mcpshield-runtime

Quick Install

README Excerpt

Tools (5)

Topics

Related AI/LLM Servers