🛡️ MCP-Shield Pro — Enterprise MCP Supply Chain & Runtime Governance Shield

Enterprise-grade zero-dependency security shield and runtime governance engine for Model Context Protocol (MCP) servers, AI agent tool pipelines, and AIBOM compliance.

---

⚡ Key Highlights & Core Capabilities

• ⚡ Zero External Runtime Dependencies: Pure Node.js ES Module runtime delivering sub-millisecond execution (< 2ms) with zero third-party npm package overhead.
• 🛡️ OWASP MCP Top 10 Security Audit: Automated static & dynamic code inspection covering unauthenticated endpoints, tool signature gaps, prompt injection, and command injection.
• 🔐 Cryptographic Tool Call Signing: HMAC-SHA256 tool request signing and replay attack prevention for agent execution pipelines.
• 📄 Standardized AIBOM Generator: Automated AI Bill of Materials (AIBOM) generation tracking component file hashes, tools, and security provenance.
• 🧱 Inline Runtime Parameter Firewall: Intercepts tool parameters in real-time to block path traversal, shell metacharacters, SSRF, and adversarial injection patterns.
• 🔌 Native MCP Protocol Server: Stdio JSON-RPC 2.0 interface exposing mcp_scan, generate_aibom, and mcp_verify tools directly to OpenClaw, Codex, Claude Code, and Cursor.
• 🎨 Interactive Browser Studio Dashboard: Embedded single-file studio (demo/index.html) featuring live security gauges, OWASP rule status, and parameter firewall sandbox.
• 🔄 Error-Resuming Auto-Installer: Executable ./install.sh with checkpoint tracking (.install_checkpoint) and ./install.sh --resume recovery.

---

📐 System Architecture

---

🛡️ OWASP MCP Top 10 Security Rule Coverage

Rule ID	Threat Category	Description	Severity	Safeguard Mechanism
MCP-01	🔑 Authentication	Unauthenticated Endpoint Exposure	🔴 HIGH	Bearer/HMAC Auth Verification
MCP-02	🔐 Integrity	Missing Cryptographic Tool Signatures	🔴 HIGH	ToolSigner HMAC-SHA256 Enforcer
MCP-03	🧠 AI Security	Indirect Prompt Injection Vulnerability	🟣 CRITICAL	Delimiter Boundary Sanitization
MCP-04	🛡️ Authorization	Excess Tool Privileges & Over-scoping	🟡 MEDIUM	Principle of Least Privilege Inspector
MCP-05	📦 Supply Chain	Untrusted Supply Chain Dependency	🔴 HIGH	AIBOM Provenance & Hash Verification
MCP-06	⚡ Execution	Arbitrary Command & Shell Injection	🟣 CRITICAL	RuntimeFirewall Parameter Sanitizer
MCP-07	📁 File System	Path Traversal & Traversal Escapes	🔴 HIGH	Workspace Root Path Containment
MCP-08	🌐 Network	Server-Side Request Forgery (SSRF)	🔴 HIGH	URL Host Domain Allowlisting
MCP-09	🔒 Privacy	Unbounded Context & Credential Leak	🔴 HIGH	Secret Regex & Pattern Scrubber
MCP-10	📝 Logging	Missing Audit Trail & Session Identity	🟡 MEDIUM	Structured JSON Audit Logger

---

🚀 Quick Start & Installation

1️⃣ Automatic Installation with Error Resume

# Clone and run the self-healing auto-installer
git clone https://github.com/tonysheesh/mcp-shield-pro.git
cd mcp-shield-pro
./install.sh

# If any step is interrupted, resume automatically:
./install.sh --resume

2️⃣ Running Security Audits via CLI

# Run OWASP MCP Top 10 security audit on current codebase
node bin/mcp-shield.js --scan .

# Generate AI Bill of Materials (AIBOM)
node bin/mcp-shield.js --aibom .

# Run strict Quality Approval Gate checks
node bin/mcp-shield.js --quality .

---

⚡ Comparison & Superiority

Feature / Metric	Legacy Scanners & Python Tools	MCP-Shield Pro
Runtime Dependencies	Heavy (pip packages, native C++)	0 External Dependencies (Pure Node ESM)
Audit Execution Speed	~1.5s - 3.2s per codebase	< 2ms per scan (150x Faster)
Tool Call Integrity	Plaintext JSON / Unsigned	HMAC-SHA256 Cryptographic Signatures
Supply Chain Governance	Manual SBOMs	Automated AI Bill of Materials (AIBOM)
Runtime Protection	Static Analysis Only	Inline Parameter Firewall Sandbox
IDE & Agent Integration	Manual CLI invocation	Native Stdio MCP JSON-RPC Server
Installer Resiliency	Standard script (fails on error)	Checkpoint State Tracking (--resume)

---

💻 Programmatic API Usage

import { MCPScanner, ToolSigner, RuntimeFirewall, AIBOMGenerator } from 'mcp-shield-pro';

// 1. Audit an MCP tool file
const scanner = new MCPScanner();
const audit = scanner.scanFile('./lib/mcpServer.js');
console.log(`Security Score: ${audit.score}/100 | Passed: ${audit.passed}`);

// 2. Cryptographically sign a tool call
const signer = new ToolSigner('your-master-secret-key');
const signedPayload = signer.signToolCall('query_database', { query: 'SELECT 1' });

// 3. Verify signature
const verification = signer.verifyToolCall(signedPayload);
console.log(`Signature Valid: ${verification.valid}`);

// 4. Runtime parameter firewall inspection
const firewall = new RuntimeFirewall();
const inspection = firewall.inspectParams('read_file', { path: '../../etc/passwd' });
console.log(`Allowed: ${inspection.allowed}`); // false

---

🗺️ Roadmap

• Support for Ed25519 asymmetric public-key signature verification for decentralized tool execution.
• Real-time eBPF syscall filtering integration for containerized agent workloads.
• Automated OWASP MCP Top 10 rule auto-fixer (--fix) to patch vulnerabilities in-place.
• Multi-region threat intelligence feed synchronization for emerging prompt injection patterns.
• Browser Studio web assembly (WASM) compiler for client-side zero-server scanning.

---

📜 License

MIT License © 2026 tonysheesh