{"slug":"protect-mcp","title":"protect-mcp","description":"MCP security gateway that wraps any MCP server with per-tool policies, Ed25519-signed decision receipts, and human approval gates. Shadow mode (default) logs every tool call without blocking. Enforce mode applies per-tool allow/deny/rate-limit/approval policies. Every decision is cryptographically signed and independently verifiable offline. MIT licensed. IETF Internet-Draft published for the receipts protocol.","developer":"Tom Farley","category":null,"reported_installs":null,"active":true,"first_seen_at":"2026-10-03T22:13:33.942Z","last_seen_at":"2026-11-07T00:08:29.147Z","last_changed_at":"2026-10-03T22:13:33.942Z","platform":"claude","sources":["Community"],"works_with":["Claude Code"],"marketplace_url":null,"repository_url":"https://github.com/tomjwxf/protect-mcp-plugin.git","web_data":{},"github_data":{},"catalog_sources":{"community":[{"name":"protect-mcp","source":{"sha":"5c15299a5cb42003c9ece791655c7b9e4ebfcf82","url":"https://github.com/tomjwxf/protect-mcp-plugin.git","source":"url"},"homepage":"https://scopeblind.com/docs/protect-mcp","description":"MCP security gateway that wraps any MCP server with per-tool policies, Ed25519-signed decision receipts, and human approval gates. Shadow mode (default) logs every tool call without blocking. Enforce mode applies per-tool allow/deny/rate-limit/approval policies. Every decision is cryptographically signed and independently verifiable offline. MIT licensed. IETF Internet-Draft published for the receipts protocol."}]},"manifest":{"url":"https://raw.githubusercontent.com/tomjwxf/protect-mcp-plugin/5c15299a5cb42003c9ece791655c7b9e4ebfcf82/.claude-plugin/plugin.json","payload":{"name":"protect-mcp","note":"protect-mcp (MIT). Verification layer (@veritasacta/verify) is Apache-2.0.","author":{"name":"Tom Farley","email":"tommy@scopeblind.com"},"license":"MIT","version":"1.0.0","homepage":"https://scopeblind.com","repository":"https://github.com/scopeblind/ScopeBlindD2","description":"MCP security gateway — per-tool policies, Ed25519-signed receipts, human approval gates. Shadow mode logs everything without blocking. Enforce mode applies policy. Every decision is cryptographically signed and verifiable offline."},"observed_at":"2026-11-06T10:48:07Z"}}