About Driftcop
Driftcop is an MCP server published by sudoviz in the Commerce category: aI powered SAST tool for MCP servers to detect MCP server drift detection and tracking via SigStore + Web UI for Enterprise Users.
The repository has 11 stars and 5 forks, with the last commit 5 months ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
From source
git clone https://github.com/sudoviz/driftcopThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
✦
Ask AI about Driftcop
Powered by Claude · Grounded in docs
I know everything about Driftcop. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
Static checks derived from the repository 17 hours ago. Heuristics on the source, not an audit.
- ✓README presentThe repository ships documentation.
- ✓License declaredUsable under a stated license.
- ✓Tests presentA test suite exists in the repository.
- ✓Dependencies pinnedA lockfile pins dependency versions.
- !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.
- !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.
README
🎯 What is DriftCop?
Drift-Cop is your Enterprise grade MCP security scanner based CLI + live dashboard that spots dangerous drift in AI tools. It spots injection hacks, and CVEs, signs every change in SigStore. Drift-Cop is designed to help AI developers and InfoSec organizations identify, track, and mitigate security vulnerabilities in MCP server implementations they use from external untrusted sources.
🔥 Why Drift-Cop?
- Spot the Drift instantly – Diff every manifest, dependency and workspace change against golden baselines in real-time.
- Attack-aware Scanning – Rug-pull, typosquat, supply-chain & prompt-injection rules baked-in and update daily.
- Actionable Autopilot – AI-generated fixes, PR suggestions and Slack/SIEM alerts 🚨.
- Two-Piece Powerhouse – Lightweight CLI + Cloud Control-Plane give you end-to-end coverage without vendor lock-in.
“We caught an auth-bypass typo before it hit production. Drift-Cop paid for itself on day one.” – A Very Happy DevOps Lead
Drift-Cop is a defensive security platform designed to help developers and organizations identify, track, and mitigate security vulnerabilities in MCP server implementations. It consists of two main components working seamlessly together to provide end-to-end security coverage.
🎥 Demo Video
📦 Components
1. MCP Security Scanner (mcp-sec)
A powerful command-line security scanner that performs deep analysis of MCP servers, codebases, and dependencies.
Key Features:
- Multi-Layer Scanning: Comprehensive analysis of server manifests, workspace code, and dependencies
- Advanced Threat Detection:
- Typosquatting detection using Levenshtein distance and TF-IDF similarity
- Semantic drift analysis powered by LLM to detect mismatches between descriptions and capabilities
- Prompt injection pattern detection including hidden characters and system manipulation
- Known CVE scanning in dependencies
- Cryptographic Security:
- SHA-256 based tool hashing with canonical JSON representation
- Sigstore integration for digital signatures (DSSE envelope format)
- Version tracking to detect unauthorized changes
- Lock file management for manifest pinning
- Language Support: Extracts MCP tool definitions from 10+ languages using Tree-sitter AST parsing
- Flexible Reporting: Markdown, JSON, and SARIF formats for CI/CD integration
2. MCP Security Web UI (mcp-sec-web)
A modern React-based dashboard providing real-time visualization and management of security findings.
Key Features:
- Real-Time Dashboard: Live monitoring of configuration drifts and security issues
- Interactive Approval Workflows:
- Quick approve for low-risk changes
- Detailed review process for high-risk modifications
- Complete audit trail with timestamps and approver tracking
- Advanced Filtering & Search: Filter by severity, environment, repository, or custom search
- Bulk Operations: Select and approve multiple drifts simultaneously
- Data Export: CSV and JSON export for reporting and analysis
- Zero-Integration Design: Works with existing MCP-SEC installations without code modifications
┌─────────────────────────────────────────────────────────────────────────────────────┐
│ MCP SECURITY SCANNER (mcp-sec/) │
│ "Shift-Left Security for MCP Servers" │
│ Version 0.1.0 │
└─────────────────────────────────────────────────────────────────────────────────────┘
┌─────────────────────────────────────────────────────────────────────────────────────┐
│ CORE SCANNERS │
├─────────────────────────────────────────────────────────────────────────────────────┤
│ │
│ ┌──────────────────────┐ ┌──────────────────────┐ ┌──────────────────────┐ │
│ │ SERVER SCANNER │ │ WORKSPACE SCANNER │ │ DEPENDENCY SCANNER │ │
│ ├──────────────────────┤ ├──────────────────────┤ ├──────────────────────┤ │
│ │ • Manifest validation │ │ • Prompt injection │ │ • CVE detection │ │
│ │ • Schema checking │ │ • MCP tool extraction│ │ • Typosquatting │ │
│ │ • Permission audit │ │ • Code pattern match │ │ • Version checks │ │
│ │ • Typo detection │ │ • Zero-width chars │ │ • Package analysis │ │
│ │ • Semantic analysis │ │ • Security patterns │ │ • Lock verification │ │
│ └──────────────────────┘ └──────────────────────┘ └──────────────────────┘ │
│ ▲ ▲ ▲ │
│ │ │ │ │
│ └──────────────────────────┴──────────────────────────┘ │
│ │ │
└──────────────────────────────────────┴──────────────────────────────────────────────┘
┌─────────────────────────────────────────────────────────────────────────────────────┐
│ SECURITY ANALYZERS │
├─────────────────────────────────────────────────────────────────────────────────────┤
│ │
│ ┌─────────────────────────────────┐ ┌─────────────────────────────────┐ │
│ │ TYPO DETECTOR │ │ SEMANTIC ANALYZER │ │
│ ├─────────────────────────────────┤ ├─────────────────────────────────┤ │
│ │ │ │ │ │
│ │ fiIesystem ≈ filesystem │ │ 🤖 OpenAI LLM Analysis │ │
│ │ ┌───────────────────┐ │ │ ┌─────────────────────┐ │ │
│ │ │ Levenshtein ≤ 2 │ │ │ │ Description: │ │ │
│ │ │ Dice coefficient │ ◄─────── ┼──────┼─▶│ "Read-only tool" │ │ │
│ │ │ Homograph check │ │ │ │ Schema: │ │ │
│ │ │ TF-IDF + Cosine │ │ │ │ {delete: true} ❌ │ │ │
│ │ └───────────────────┘ │ │ └─────────────────────┘ │ │
│ │ │ │ │ │
│ └─────────────────────────────────┘ └─────────────────────────────────┘ │
│ │
└─────────────────────────────────────────────────────────────────────────────────────┘
┌─────────────────────────────────────────────────────────────────────────────────────┐
│ CRYPTOGRAPHIC SECURITY │
├─────────────────────────────────────────────────────────────────────────────────────┤
│ │
│ ┌─────────────────────┐ ┌─────────────────────┐ ┌─────────────────────┐ │
│ │ TOOL HASHING │ │ SIGSTORE SIGNING │ │ VERSION TRACKING │ │
│ ├─────────────────────┤ ├─────────────────────┤ ├─────────────────────┤ │
│ │ │ │ │ │ │ │
│ │ Tool Definition │ │ ┌──────────────┐ │ │ v1.0 ──► v1.1 │ │
│ │ ↓ │ │ │ DSSE Format │ │ │ ↓ ↓ │ │
│ │ Canonical JSON │ │ │ OIDC Auth │ │ │ Hash₁ ≠ Hash₂ │ │
│ │ ↓ │ │ │ Transparency │ │ │ ↓ ↓ │ │
│ │ SHA-256 Hash │ │ └──────────────┘ │ │ 🔔 Notification │ │
│ │ ↓ │ │ ↓ │ │ ↓ ↓ │ │
│ │ abc123def456... │ │ ✓ Verified │ │ ⚠️ Approval Req │ │
│ │ │ │ │ │ │ │
│ └─────────────────────┘ └─────────────────────┘ └─────────────────────┘ │
│ │
└─────────────────────────────────────────────────────────────────────────────────────┘
┌─────────────────────────────────────────────────────────────────────────────────────┐
│ CHANGE MANAGEMENT │
├─────────────────────────────────────────────────────────────────────────────────────┤
│ │
│ ┌────────────┐ ┌────────────┐ ┌────────────┐ ┌────────────┐ │
│ │ DETECTION │ ──► │ NOTIFY │ ──► │ APPROVAL │ ──► │ APPLY │ │
│ └────────────┘ └────────────┘ └────────────┘ └────────────┘ │
│ │ │ │ │ │
│ ▼ ▼ ▼ ▼ │
│ ╔════════════╗ ╔════════════╗ ╔════════════╗ ╔════════════╗ │
│ ║ Tool Added ║ ║ Risk Level ║ ║ ✓ Approve ║ ║ Tool Active║ │
│ ║ Perm Change║ ║ Stored DB ║ ║ ✗ Reject ║ ║ Or Blocked ║ │
│ ║ Hash Change║ ║ SQLite ║ ║ CLI/API ║ ║ Tracked ║ │
│ ╚════════════╝ ╚════════════╝ ╚════════════╝ ╚════════════╝ │
│ │
└─────────────────────────────────────────────────────────────────────────────────────┘
🚀 Quick Start
Installation
# Install Drift Cop CLI
pip install driftcop
# Clone the repository for web UI
git clone https://github.com/yourusername/drift-cop.git
cd drift-cop
Basic Usage
- Scan an MCP Server:
driftcop scan-server https://example.com/mcp-server
- Start the Web UI:
cd mcp-sec-web
./start.sh
- Access the Dashboard:
- Web UI: http://localhost:5173
- API Docs: http://localhost:8000/docs
🔍 Security Checks
Vulnerability Detection
- Typosquatting: Detects lookalike server names (e.g.,
fiIesystemvsfilesystem) - Semantic Drift: Identifies tools whose capabilities don't match their descriptions
- Permission Analysis: Flags excessive or dangerous permissions
- Prompt Injection: Detects hidden instructions and malicious patterns
- Supply Chain: Scans for known CVEs and unpinned dependencies
Risk Scoring
Findings are categorized by severity:
- Critical (10.0): Immediate security risk requiring urgent action
- High (7.0): Serious security concern
- Medium (4.0): Moderate risk
- Low (1.0): Minor issue
- Info (0.0): Informational finding
🏗️ Architecture
┌─────────────────────────────────────────────────────────────────────┐
│ Drift-Cop │
├─────────────────────────────────────────────────────────────────────┤
│ │
│ ┌──────────────────┐ ┌──────────────────┐ │
│ │ MCP-SEC Scanner │ │ MCP-SEC Web UI │ │
│ ├──────────────────┤ ├──────────────────┤ │
│ │ • CLI Interface │ │ • React Frontend │ │
│ │ • Multi-Scanner │◄─────────►│ • FastAPI Backend│ │
│ │ • Crypto Engine │ │ • Real-time Dash │ │
│ │ • Report Gen │ │ • Approval Flow │ │
│ └────────┬─────────┘ └────────┬─────────┘ │
│ │ │ │
│ └──────────────┬────────────────┘ │
│ ▼ │
│ ┌──────────────┐ │
│ │ SQLite DBs │ │
│ ├──────────────┤ │
│ │ • Tracking │ │
│ │ • Approvals │ │
│ │ • History │ │
│ └──────────────┘ │
│ │
└─────────────────────────────────────────────────────────────────────┘
📊 Workflow Integration
CI/CD Pipeline
# Example GitHub Actions workflow
- name: Drift Cop Security Scan
run: |
driftcop ci-hook https://your-server.com \
--threshold 5.0 \
--sarif report.sarif
- name: Upload SARIF
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: report.sarif
Change Management Process
- Detection: Scanner identifies configuration changes
- Notification: Changes tracked in SQLite database
- Review: Security team reviews via web dashboard
- Approval: Approved changes are applied, rejected ones blocked
- Audit: Complete trail maintained for compliance
🛡️ Security Best Practices
For MCP Server Developers
- Pin Dependencies: Use exact versions in lock files
- Sign Manifests: Use Sigstore for cryptographic signatures
- Minimize Permissions: Request only necessary capabilities
- Clear Descriptions: Ensure tool descriptions match functionality
- Regular Scans: Integrate security scanning in CI/CD
For Security Teams
- Regular Monitoring: Use web dashboard for continuous oversight
- Risk Thresholds: Set appropriate thresholds for your environment
- Approval Workflows: Establish clear approval processes
- Audit Trails: Maintain records for compliance
- Incident Response: Have plans for high-severity findings
📚 Documentation
- MCP-SEC CLI Reference
- Web UI Guide
- Integration Guide
- API Documentation (when running)
🤝 Contributing
We welcome contributions! Please see our contributing guidelines for:
- Code style and standards
- Testing requirements
- Pull request process
- Security disclosure policy
📄 License
DriftCop is released under an open-core licensing model:
- Core Components (
/mcp-sec,/mcp-sec-web): Apache License 2.0 - Community Rules (
/rules/community): CC0 1.0 (Public Domain) - Enterprise Features (
/enterprise,/cloud,/rules/pro): Business Source License 1.1 - Documentation (
/docs,/logos): CC BY 4.0
See LICENSE.txt for full details.
Contributing
By submitting contributions, you agree to our Contributor License Agreement.
🙏 Acknowledgments
- Built for the Model Context Protocol community
- Powered by Tree-sitter for robust code parsing
- Uses Sigstore for supply chain security
- Inspired by best practices from OWASP and security research
Security Notice: This tool is designed for defensive security purposes only. It helps developers and security teams identify and prevent vulnerabilities in MCP implementations. Always use responsibly and in accordance with applicable laws and regulations.
README fetched from the repository 17 hours ago. The original is authoritative.