1. Conduid
  2. Developer Tools
  3. SafeLine
MCP server · Developer Tools

SafeLine

by · github.com/chaitin/SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Unclaimed GPL-3.0 appseccybersecuritycaptchasecurityblueteamcvebruteforceapi-gatewayapplication-security
InstallView source
84Excellent

Scored 3 days ago · breakdown

About SafeLine

SafeLine is an MCP server published by chaitin in the Developer Tools category: safeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

The repository has 23K stars and 1.6K forks, with the last commit 24 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/chaitin/SafeLine

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about SafeLine

Powered by Claude · Grounded in docs

I know everything about SafeLine. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 4 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v9.4.2SafeLine-CE 9.4.2 · 28 Sep 2026Added Pro Added support for custom response status codes in the Error Limiting rule under HTTP Flood. Improved Lite/Pro Support direct downgrade to the next lower edition when a license expires, while preserving the configurations and data…
v9.4.1SafeLine-CE 9.4.1 · 3 Sep 2026Added Allowlist and denylist detection logs can now be filtered by Rule ID, making it easier to locate the corresponding logs directly from a specific rule. Abnormal data such as blocked requests, rate limiting, Anti-bot, and Auth in…
v9.4.0SafeLine-CE 9.4.0 · 17 Aug 2026Added Added detection for the Apache Kafka Connect arbitrary file read vulnerability (CVE-2025-27817). Added detection for multiple .NET deserialization attack vectors, covering common exploitation methods involving Json.NET, FastJson,…
v9.3.11SafeLine-CE 9.3.11 · 28 Jul 2026Added Added a Today time range to the statistics dashboard, calculated using the browser’s local calendar day with daylight saving time support. Added dark mode for Lite and Pro editions. Added certificate IDs to the certificate management…
v9.3.10SafeLine-CE 9.3.10 · 10 Jul 2026Added Added a read-only role for the console. Improved Improved the license authentication and management mechanisms. Fixed Fixed an issue where the order of Allow & Deny - CUSTOM RULES could be reset by creation time after a service…

README

👋 INTRODUCTION

SafeLine is a self-hosted WAF(Web Application Firewall) to protect your web apps from attacks and exploits.

A web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, CRLF injection, ldap injection, xpath injection, RCE, XXE, SSRF, path traversal, backdoor, bruteforce, http-flood, bot abused, among others.

💡 How It Works

By deploying a WAF in front of a web application, a shield is placed between the web application and the Internet. While a proxy server protects a client machine’s identity by using an intermediary, a WAF is a type of reverse-proxy, protecting the server from exposure by having clients pass through the WAF before reaching the server.

A WAF protects your web apps by filtering, monitoring, and blocking any malicious HTTP/S traffic traveling to the web application, and prevents any unauthorized data from leaving the app. It does this by adhering to a set of policies that help determine what traffic is malicious and what traffic is safe. Just as a proxy server acts as an intermediary to protect the identity of a client, a WAF operates in similar fashion but acting as a reverse proxy intermediary that protects the web app server from a potentially malicious client.

its core capabilities include:

  • Defenses for web attacks
  • Proactive bot abused defense
  • HTML & JS code encryption
  • IP-based rate limiting
  • Web Access Control List

⚡️ Screenshots

Get Live Demo

🔥 FEATURES

List of the main features as follows:

  • Block Web Attacks
    • It defenses for all of web attacks, such as SQL injection, XSS, code injection, os command injection, CRLF injection, XXE, SSRF, path traversal and so on.
  • Rate Limiting
    • Defend your web apps against DoS attacks, bruteforce attempts, traffic surges, and other types of abuse by throttling traffic that exceeds defined limits.
  • Anti-Bot Challenge
    • Anti-Bot challenges to protect your website from bot attacks, human users will be allowed, crawlers and bots will be blocked.
  • Authentication Challenge
    • When authentication challenge turned on, visitors need to enter the password, otherwise they will be blocked.
  • Dynamic Protection
    • When dynamic protection turned on, html and js codes in your web server will be dynamically encrypted by each time you visit.

🧩 Showcases

Legitimate User Malicious User
Block Web Attacks
Rate Limiting
Anti-Bot Challenge
Auth Challenge
HTML Dynamic Protection
JS Dynamic Protection

🚀 Quickstart

[!WARNING] 中国大陆用户安装国际版可能会导致无法连接云服务，请查看 中文版安装文档

📦 Installing

Information on how to install SafeLine can be found in the Install Guide

⚙️ Protecting Web Apps

to see Configuration

📋 More Information

Effect Evaluation

Metric ModSecurity, Level 1 CloudFlare, Free SafeLine, Balance SafeLine, Strict
Total Samples 33669 33669 33669 33669
Detection 69.74% 10.70% 71.65% 76.17%
False Positive 17.58% 0.07% 0.07% 0.22%
Accuracy 82.20% 98.40% 99.45% 99.38%

Is SafeLine Production-Ready?

Yes, SafeLine is production-ready.

🌟 Community Recognition

🔌 Ecosystem Integrations

🙋‍♂️ Community

Join our Discord to get community support, the core team members are identified by the STAFF role in Discord.

  • channel #feedback: for new features discussion.
  • channel #FAQ: for FAQ.
  • channel #general: for any other questions.

Several contact options exist for our community, the primary one being Discord. These are in addition to GitHub issues for creating a new issue.

💪 PRO Edition

SafeLine PRO is now available! Explore plans and pricing or start a 7-day trial.

📝 License

See LICENSE for details.

README fetched from the repository 4 days ago. The original is authoritative.

Questions

About SafeLine

How do I install SafeLine?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is SafeLine safe to use with an AI agent?

Its trust score is 84 out of 100 (excellent). It passes 5 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is SafeLine still maintained?

Yes — the latest release is v9.4.2 (28 Sep 2026), and the last commit was 24 days ago. The repository has 23K stars and 50 open issues.