mcpgawk
A locally executed MCP security tool that prevents MCP servers from silently modifying tool descriptions or permissions after approval. It operates by recording behavioral baselines, performing sandbox-based detection, and intercepting call paths, requiring human confirmation for any detected changes.
Timeline (last 90 days)
mcpgawk is an MCP security tool launched by developer Neelagiri Chettiyar.
mcpgawk ranked 15th for the day on Product Hunt with 69 votes, categorized under three tags: Developer Tools, GitHub, and Security.
mcpgawk employs a three-layer mechanism: behavior baseline recording, sandbox verification, and path interception.
mcpgawk records tool descriptions and permission states for each MCP server as a trusted baseline, and detects the server's actual behavior in a sandbox environment.
mcpgawk sits on the invocation path and rejects related calls when tool descriptions or permissions change, until the user personally confirms the change.
mcpgawk is designed to ensure that agents cannot bypass the checkpoint to approve their own changes, specifically targeting prompt injection attack scenarios.
All of mcpgawk's detection runs entirely on the local machine and does not upload any content.
mcpgawk is available in three forms: a free command-line tool, a VS Code extension, and an MCP server.
mcpgawk's free tier covers basic baseline recording and interception functionality, while the more advanced gateway tier offers a 7-day trial.
All Facts (9)
mcpgawk's free tier covers basic baseline recording and interception functionality, while the more advanced gateway tier offers a 7-day trial.
50%Unverifiedmcpgawk is an MCP security tool launched by developer Neelagiri Chettiyar.
50%Unverifiedmcpgawk employs a three-layer mechanism: behavior baseline recording, sandbox verification, and path interception.
50%Unverifiedmcpgawk records tool descriptions and permission states for each MCP server as a trusted baseline, and detects the server's actual behavior in a sandbox environment.
50%Unverifiedmcpgawk sits on the invocation path and rejects related calls when tool descriptions or permissions change, until the user personally confirms the change.
50%Unverifiedmcpgawk is designed to ensure that agents cannot bypass the checkpoint to approve their own changes, specifically targeting prompt injection attack scenarios.
50%UnverifiedAll of mcpgawk's detection runs entirely on the local machine and does not upload any content.
50%Unverifiedmcpgawk is available in three forms: a free command-line tool, a VS Code extension, and an MCP server.
50%Unverifiedmcpgawk ranked 15th for the day on Product Hunt with 69 votes, categorized under three tags: Developer Tools, GitHub, and Security.
50%