1. Conduid
  2. Developer Tools
  3. Defender
MCP server · Developer Tools

Defender

by · github.com/MCP-Defender/MCP-Defender

Desktop app that automatically scans and blocks malicious MCP traffic in AI apps like Cursor, Claude, VS Code and Windsurf.

Unclaimed AGPL-3.0 last commit 12 months ago model-context-protocolmcpmcp-toolsmcp-securitymcp-serverdevtoolsmcp-clientai-toolsmcp-client-security
InstallView source
80Excellent

Scored 3 hours ago · breakdown

About Defender

Defender is an MCP server published by MCP-Defender in the Developer Tools category: desktop app that automatically scans and blocks malicious MCP traffic in AI apps like Cursor, Claude, VS Code and Windsurf. It has been installed 0 times through Conduid.

The repository has 245 stars and 40 forks, with the last commit 12 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx mcp-defender

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Defender

Powered by Claude · Grounded in docs

I know everything about Defender. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v1.1.2v1.1.2 · 24 Aug 2025
v1.1.1v1.1.1 · 19 Jun 2025
v1.1.0v1.1.0 · 11 Jun 2025What's Changed Bugfixes for CI timeout and word wrapping, secure-tools by @saucow in https://github.com/MCP-Defender/MCP-Defender/pull/23 Bump 1.1.0 + remove hardcoded path by @saucow in https://github.com/MCP-Defender/MCP-Defender/pull/24…
v1.0.9v1.0.9 · 10 Jun 2025
v1.0.8v1.0.8 · 5 Jun 2025

README

🛡️ MCP Defender is a desktop app that protects AI apps like Cursor from a variety of attacks.

🚦 All MCP tool call requests and responses from AI apps are automatically proxied through MCP Defender.

🔎 The intercepted data is then checked against a set of signatures.

🔐 If anything harmful is detected, MCP Defender alerts you and asks if you want to allow or block the tool call.

Demos

https://github.com/user-attachments/assets/363ae2b1-e395-4cdc-b5ca-e9862baf89c3

Quick Start

Download MCP Defender for Mac

Alternatively you can clone the git repo, and run it as follows:

# Install dependencies
npm install

# Start app
npm start

Which apps are automatically protected?

MCP Defender protects Cursor, Claude, Visual Studio Code and Windsurf.

License

MCP Defender is licensed under the AGPL-3.0 license. For more details, see the LICENSE.

README mirrored from the source repository 3 hours ago. The original is authoritative.

Questions

About Defender

How do I install Defender?

Run npx mcp-defender, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Defender safe to use with an AI agent?

Its trust score is 80 out of 100 (excellent). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Defender still maintained?

The last commit was 12 months ago, with 0 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.