1. Conduid
  2. Security
  3. Glassport
MCP server · Security

Glassport

by · github.com/Dennis-J-Carroll/glassport

Wire-level observability and enforcement for MCP servers: passive stdio tap, behavioral detectors, drift watch, and static audit — with SARIF for the GitHub Security tab. Zero dependencies, Python 3.10+.

Unclaimed ai-safetymcpmodel-context-protocolpythonsarifsecuritysecurity-toolsstatic-analysis
InstallView source
34Low

Scored a month ago · breakdown

About Glassport

Glassport is an MCP server published by Dennis-J-Carroll in the Security category: wire-level observability and enforcement for MCP servers: passive stdio tap, behavioral detectors, drift watch, and static audit — with SARIF for the GitHub Security tab. Zero dependencies, Python 3.10+.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/Dennis-J-Carroll/glassport

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (5)

analyze_sessiondeclared vs. called vs. fabricated tools + every detector annotation

Parameters not published.

audit_serverthe static AST audit on a server source path (reads, never runs)

Parameters not published.

get_gate_statusthe calls the gate blocked in a session

Parameters not published.

list_sessionsrecent session logs, newest first

Parameters not published.

watch_driftbehavioral drift across all sessions, grouped by server

Parameters not published.

Ask AI

✦

Ask AI about Glassport

Powered by Claude · Grounded in docs

I know everything about Glassport. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.6.10v0.6.10 · 15 Jul 2026What's Changed test(streaming): loosen incremental-poll wall-clock bound to 1.5s by @Dennis-J-Carroll in https://github.com/Dennis-J-Carroll/glassport/pull/69 docs: clarify oracle independence + record perf-methodology follow-up by…
v0.6.9v0.6.9 · 13 Jul 2026What's Changed fix(detectors): span-aware redaction for obfuscated secrets (P0) by @Dennis-J-Carroll in https://github.com/Dennis-J-Carroll/glassport/pull/61 harden(http): Connection-hop filtering + strict remote-URL validation by…
v0.6.8v0.6.8 · 11 Jul 2026What's Changed harden(http): relay round-4 SSE framing — 0.6.7 by @Dennis-J-Carroll in https://github.com/Dennis-J-Carroll/glassport/pull/55 harden(http): relay round-5 — SSE residue + connection/header path (0.6.8) by @Dennis-J-Carroll in…
v0.6.6v0.6.6 · 10 Jul 2026What's Changed harden(http): relay round-3 framing (lying-short Content-Length) — 0.6.6 by @Dennis-J-Carroll in https://github.com/Dennis-J-Carroll/glassport/pull/54 Full Changelog:…
v0.6.5v0.6.5 · 10 Jul 2026What's Changed H2.01 — streamable-HTTP interception (wrap --transport http) by @Dennis-J-Carroll in https://github.com/Dennis-J-Carroll/glassport/pull/51 Harden provenance + http-tap: land Kimi red-team fixes + close 3 gaps by…
Questions

About Glassport

How do I install Glassport?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Glassport safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Glassport still maintained?

Yes — the latest release is v0.6.10 (15 Jul 2026), and the last commit was 3 months ago. The repository has 0 stars.