1. Conduid
  2. Security
  3. 82ch/MCP-Dandan
MCP server · Security

82ch/MCP-Dandan

by · github.com/82ch/MCP-Dandan

MCP Security Solution for Agentic AI — real-time proxying, behavior analysis, and malicious tool detection

Unclaimed MIT devtoolsai-security-toolawesome-listsmcp-hostai-securityai-toolsmcp-gatewaymcpmcp-guard
InstallView source
74Good

Scored 3 hours ago · breakdown

About 82ch/MCP-Dandan

82ch/MCP-Dandan is an MCP server published by 82ch in the Security category: mCP Security Solution for Agentic AI — real-time proxying, behavior analysis, and malicious tool detection.

The repository has 67 stars and 8 forks, with the last commit 2 months ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/82ch/MCP-Dandan

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about 82ch/MCP-Dandan

Powered by Claude · Grounded in docs

I know everything about 82ch/MCP-Dandan. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 3 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • !Dependencies pinnedNo lockfile. Installs can pull different code over time.
  • !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

1.1.0v1.1.0 · 13 Dec 2025Installation You can install MCP-Dandan using **one of the following methods**: Option 1. Install from Source (Development Mode) Clone the repository and install all dependencies using the provided scripts. git clone…
1.0.1v1.0.1 · 6 Dec 2025Installation You can install MCP-Dandan using **one of the following methods**: Option 1. Install from Source (Development Mode) Clone the repository and install all dependencies using the provided scripts. git clone…
v1.0.0v1.0.0 · 30 Nov 2025Installation You can install MCP-Dandan using **one of the following methods**: Option 1. Install from Source (Development Mode) Clone the repository and install all dependencies using the provided scripts. git clone…

README

MCP-Dandan - MCP Security Framework

Overview

MCP-Dandan is an integrated monitoring service that observes MCP (Model Context Protocol) communications and detects security threats in real time. It features a modern desktop UI built with Electron for easy monitoring and management.

MCP-Dandan has been featured and listed across MCP and AI security communities, open-source collections, and platforms:

https://github.com/user-attachments/assets/928686ab-a5aa-4486-8d8e-d4a9592adc3e

Features

  • Real-time MCP Traffic Monitoring: Intercepts and analyzes MCP communications
  • Multi-Engine Threat Detection:
    • Command Injection Detection
    • File System Exposure Detection
    • PII Leak Detection(custom rules supported)
    • Data Exfiltration Detection
    • Tools Poisoning Detection (LLM-based)
  • Desktop UI: Electron-based application with interactive dashboard
  • Interactive Tutorial: Built-in tutorial system for new users
  • Blocking Capabilities: Real-time threat blocking with user control
  • Cross-Platform: Supports Windows, macOS, and Linux

Quick Start

Installation

# Clone the repository
git clone https://github.com/82ch/MCP-Dandan.git
cd MCP-Dandan

# Install all dependencies (Python + Node.js)
npm run install-all

Running the Application

# Start both server and desktop UI
npm run dev

The server will start on http://127.0.0.1:8282 and the Electron desktop app will launch automatically.

Project Structure

Detection Engines

1. Command Injection Engine

Identifies potential command injection patterns in tool calls.

2. File System Exposure Engine

Monitors unauthorized file system access attempts.

3. PII Leak Engine (custom rules supported)

Detects potential PII leakage with built-in rules and optional user-defined customization.

4. Data Exfiltration Engine

Identifies suspicious data transfer patterns.

5. Tools Poisoning Engine (LLM-based)

Uses semantic analysis to detect misuse of MCP tools:

  • Compares tool specifications vs actual usage
  • Scores alignment (0-100) with detailed breakdown
  • Auto-categorizes severity: none/low/medium/high

Engine Setting

https://github.com/user-attachments/assets/3d6f2304-0a6b-492e-9f2d-bba76df98b4c

Desktop UI Features

  • Real-time Dashboard: Monitor MCP traffic and threats in real time
  • Interactive Tutorial: Learn how to use the system with step-by-step guides
  • Blocking Interface: Review and control threat blocking actions
  • Settings Panel: Configure detection engines and system behavior
  • Chat Panel: Interact with the system and view logs

https://github.com/user-attachments/assets/19bcbdfb-c893-468d-a8a6-1c7b70a1c7b7

Full Documentation

For detailed explanations and technical documentation, please refer to the
MCP-Dandan Wiki.

Have questions or suggestions?
Please visit the Discussions tab.

README fetched from the repository 3 hours ago. The original is authoritative.

Questions

About 82ch/MCP-Dandan

How do I install 82ch/MCP-Dandan?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is 82ch/MCP-Dandan safe to use with an AI agent?

Its trust score is 74 out of 100 (good). It passes 2 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is 82ch/MCP-Dandan still maintained?

Yes — the last commit was 2 months ago. The repository has 67 stars and 8 forks.