1. Conduid
  2. Cloud
  3. Pyrasp
MCP server · Cloud

Pyrasp

by · github.com/rbidou/pyrasp

PyRASP is a Runtime Application Self Protection package for Python-based Web Servers (Flask, FastAPI and Django), Serverless Functions (AWS Lambda, Azure and Google Cloud Functions) and MCP Servers (FastMCP)

Unclaimed NOASSERTION aws-lambdaazure-functionsdjangofastapiflaskcloudfastmcpapplication-securitygcp-cloud-functions
InstallView source
59Fair

Scored 3 hours ago · breakdown

About Pyrasp

Pyrasp is an MCP server published by rbidou in the Cloud category: pyRASP is a Runtime Application Self Protection package for Python-based Web Servers (Flask, FastAPI and Django), Serverless Functions (AWS Lambda, Azure and Google Cloud Functions) and MCP Servers (FastMCP).

The repository has 39 stars and 6 forks, with the last commit 14 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/rbidou/pyrasp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Pyrasp

Powered by Claude · Grounded in docs

I know everything about Pyrasp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 3 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • !Dependencies pinnedNo lockfile. Installs can pull different code over time.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

0.10.0PyRASP - 0.10.0 · 3 Oct 20260.10.0 READ THE DOC !!! Moved to a modular architecture, 1 class per python module Import must be refactored in the code (ex: `from pyrasp.pyrasp import FlaskRASP` -> `from pyrasp.flaskrasp import FlaskRASP` ) Kept backward compatibility…
0.9.4PyRASP - 0.9.4 · 12 Sep 2026New features New suspicious characters class: Unicode Tags (\u0000-\u007F), set with the `CHARS_UNICODE_TAGS` parameters DLP filters for cloud, repositories and AI providers API key Bot Detection, based of JA4H fingerprint Improvements…
0.9.3PyRASP - 0.9.3 · 5 Sep 2026New features Suspicious characters detection (Cyrillic lookalike, ASCII non-printable, invisible) JA4H fingerprint added to attack detail (`LOG_JA4H_FINGERPRINT`, default to `false`) Improvements If cloud server not reachable at startup,…
0.9.2PyRASP - 0.9.2 · 15 Nov 2025New features Configuration Templates Basic multipart file uploads validation for Flask and Django New reaction mechanism and capabilities READ THE DOC !!! Improved class constructor Changed configuration workflow `GTFO_MSG` and…
0.9.1PyRASP - 0.9.1 · 25 Oct 2025New features Prompt Injection detection module based on custom 100% home made LLM Logging to local file Improvement Migrated from setuptools pkg_resources (deprecated) to importlib_resources (but who cares...) Log format is now independant…

README

What is PyRASP ?

PyRASP is a Runtime Application Self Protection package for Python-based Web Servers (Flask, FastAPI, Django, aiohttp), Web Gateways (WSGI and ASGI), and Serverless Functions (AWS Lambda, Azure and Google Cloud Functions). It protects against the main attacks web applications are exposed to, from within the application. It is also capable of providing basic telemetry such as cpu and memory usage, as well as requests count. Additionally, PyRASP implements Zero-Trust Application Access for critical applications, ensuring only up-to-date authorized browsers can connect.

PyRASP provides full agentic AI security by protecting MCP servers tools from malicious inputs injections and data leaks (PII and credentials) that would result from unexpected processing. It also defend LLM frontends against malicious prompt injection attempts.

It can operate using a local configuration file or get it from a remote/cloud server. Logs and telemetry (optional) can be sent to remote servers as well, and threats information can be shared across agents.

One specificity of PyRASP relies on the fact that it does not use signatures. Instead it will leverage decoys, thresholds, system and application internals as well as machine learning for detection.

AWS Lambda Functions are no longer supported since version 0.8.3

Documentation

Full documentation Release Notes Web Site

Contacts

Renaud Bidou - renaud@paracyberbellum.io

README fetched from the repository 3 hours ago. The original is authoritative.

Questions

About Pyrasp

How do I install Pyrasp?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Pyrasp safe to use with an AI agent?

Its trust score is 59 out of 100 (fair). It passes 3 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Pyrasp still maintained?

Yes — the latest release is 0.10.0 (3 Oct 2026), and the last commit was 14 days ago. The repository has 39 stars.