Skip to content

Add config-guard — MCP security linter#1756

Open
KGT24k wants to merge 2 commits intoanalysis-tools-dev:masterfrom
KGT24k:add-config-guard
Open

Add config-guard — MCP security linter#1756
KGT24k wants to merge 2 commits intoanalysis-tools-dev:masterfrom
KGT24k:add-config-guard

Conversation

@KGT24k
Copy link

@KGT24k KGT24k commented Mar 2, 2026

Add config-guard

  • Name: config-guard
  • Homepage: https://github.com/KGT24k/mcp-config-guard
  • PyPI: https://pypi.org/project/mcp-config-guard/
  • License: MIT
  • Description: Zero-dependency security linter for MCP (Model Context Protocol) configurations. 54 OWASP-mapped checks, 28 CVE detections, 56 known malicious package signatures, typosquat detection, SARIF output, policy-as-code support. Python 3.9+.
  • Categories: Security, Configuration, Linting
  • Type: CLI

Why this belongs here

config-guard is a static analysis tool that scans MCP configuration files (JSON/YAML) for security issues:

  • 54 security checks mapped to the OWASP MCP Top 10
  • Detects 56 known malicious MCP packages and 28 CVEs
  • Typosquat detection via Levenshtein distance matching
  • Identifies leaked secrets and API keys in configs
  • Enforces security policies via policy-as-code (YAML/JSON rules)
  • Outputs SARIF v2.1.0 for CI/CD integration (GitHub Actions template included)
  • Zero dependencies (Python stdlib only)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant