1. Conduid
  2. Developer Tools
  3. Defender
MCP server · Developer Tools

Defender

by · github.com/MCP-Defender/MCP-Defender

Desktop app that automatically scans and blocks malicious MCP traffic in AI apps like Cursor, Claude, VS Code and Windsurf.

Unclaimed AGPL-3.0 devtools
InstallView source
80Excellent

Scored 11 days ago · breakdown

About Defender

Defender is an MCP server published by MCP-Defender in the Developer Tools category: desktop app that automatically scans and blocks malicious MCP traffic in AI apps like Cursor, Claude, VS Code and Windsurf.

The repository has 255 stars and 46 forks, with the last commit 4 months ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/MCP-Defender/MCP-Defender

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Defender

Powered by Claude · Grounded in docs

I know everything about Defender. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 4 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v1.1.2v1.1.2 · 24 Aug 2025
v1.1.1v1.1.1 · 19 Jun 2025
v1.1.0v1.1.0 · 11 Jun 2025What's Changed Bugfixes for CI timeout and word wrapping, secure-tools by @saucow in https://github.com/MCP-Defender/MCP-Defender/pull/23 Bump 1.1.0 + remove hardcoded path by @saucow in https://github.com/MCP-Defender/MCP-Defender/pull/24…
v1.0.9v1.0.9 · 10 Jun 2025
v1.0.8v1.0.8 · 5 Jun 2025

README

🛡️ MCP Defender is a desktop app that protects AI apps like Cursor from a variety of attacks.

🚦 All MCP tool call requests and responses from AI apps are automatically proxied through MCP Defender.

🔎 The intercepted data is then checked against a set of signatures.

🔐 If anything harmful is detected, MCP Defender alerts you and asks if you want to allow or block the tool call.

Demos

https://github.com/user-attachments/assets/363ae2b1-e395-4cdc-b5ca-e9862baf89c3

Quick Start

Download MCP Defender for Mac

Alternatively you can clone the git repo, and run it as follows:

# Install dependencies
npm install

# Start app
npm start

Which apps are automatically protected?

MCP Defender protects Cursor, Claude, Visual Studio Code and Windsurf.

License

MCP Defender is licensed under the AGPL-3.0 license. For more details, see the LICENSE.

README fetched from the repository 4 days ago. The original is authoritative.

Questions

About Defender

How do I install Defender?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Defender safe to use with an AI agent?

Its trust score is 80 out of 100 (excellent). It passes 4 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Defender still maintained?

Yes — the last commit was 4 months ago. The repository has 255 stars and 46 forks and 5 open issues.