{"_id":"@aegis-kernel/mcp","_rev":"3-a028d9d57b0ea0d193ae1e0895372fc6","name":"@aegis-kernel/mcp","dist-tags":{"latest":"1.1.0"},"versions":{"1.0.0":{"name":"@aegis-kernel/mcp","version":"1.0.0","keywords":["mcp","model-context-protocol","ai-agents","json-rpc","guardrails","tool-clearance"],"author":{"name":"Sneh Gabani","email":"sneh@aegis-kernel.dev"},"license":"MIT","_id":"@aegis-kernel/mcp@1.0.0","maintainers":[{"name":"aegis-kernel","email":"sneh.gabani1999@gmail.com"}],"homepage":"https://aegis-kernel.dev","bugs":{"url":"https://github.com/Snehgabani/aegis-kernel/issues"},"dist":{"shasum":"6dbea3a23664d5fb0a999ec9d4dc10a7f4e9a1bf","tarball":"https://registry.npmjs.org/@aegis-kernel/mcp/-/mcp-1.0.0.tgz","fileCount":8,"integrity":"sha512-oOoIxxNpAcZ/8MiTts2wTOV9oajpLm4yVV+U9rNLi5i+cfwGMY0OSAISJsnsTIhtE+t8CC/txdD+4qvUPgqYgQ==","signatures":[{"sig":"MEUCIFucYtqGjmzPpr3T3Lm+b6EIK0/r2fbVgogyJFMcQKorAiEA8D8TvMqihmf8K3RKcyM0Ki3aZn3XN6THMxcHcze+1tk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":66101},"main":"./dist/index.cjs","type":"module","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18.0.0"},"exports":{".":{"types":{"import":"./dist/index.d.ts","require":"./dist/index.d.cts"},"import":"./dist/index.js","require":"./dist/index.cjs"}},"gitHead":"a5d907eb2f205ff5d5a96abcf5da33d1b900eaff","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsup"},"_npmUser":{"name":"aegis-kernel","email":"sneh.gabani1999@gmail.com"},"repository":{"url":"git+https://github.com/Snehgabani/aegis-kernel.git","type":"git","directory":"packages/mcp"},"_npmVersion":"10.9.8","description":"Model Context Protocol (MCP) JSON-RPC safety clearance middleware for AI agents","directories":{},"_nodeVersion":"22.23.2","dependencies":{"@aegis-kernel/core":"*"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.6","vitest":"^4.1.10","typescript":"^5.7.3","@types/node":"^26.2.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_1.0.0_1787148116648_0.09479603427496675","host":"s3://npm-registry-packages-npm-production"},"deprecated":"Package no longer supported. Contact Support at https://www.npmjs.com/support for more info."},"1.1.0":{"name":"@aegis-kernel/mcp","version":"1.1.0","keywords":["mcp","model-context-protocol","ai-agents","json-rpc","guardrails","tool-clearance"],"author":{"name":"Sneh Gabani","email":"sneh@aegis-kernel.dev"},"license":"MIT","_id":"@aegis-kernel/mcp@1.1.0","maintainers":[{"name":"aegis-kernel","email":"sneh.gabani1999@gmail.com"}],"homepage":"https://snehgabani.github.io/aegis-kernel/","bugs":{"url":"https://github.com/Snehgabani/aegis-kernel/issues"},"dist":{"shasum":"a8dce88595073908e27c6847456ca62c97863275","tarball":"https://registry.npmjs.org/@aegis-kernel/mcp/-/mcp-1.1.0.tgz","fileCount":8,"integrity":"sha512-QuL8HdkLoOoV8av1x2pUEw5qU2kGf/RENFaB50mmJ7MHaDjBfQCfTG9vq380MFQ2cH+2Okj4yjg9zkjEfYO1vg==","signatures":[{"sig":"MEUCIQD4F4jJ95m8B8GctvphMSUENNZk/xklAoLpvl1HJNvgfQIgV/sABZb2U0ryolxqk04pOgQJZoIu6w7dnCVougBvXbc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@aegis-kernel%2fmcp@1.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":73787},"main":"./dist/index.cjs","type":"module","types":"./dist/index.d.ts","module":"./dist/index.js","engines":{"node":">=18.0.0"},"exports":{".":{"types":{"import":"./dist/index.d.ts","require":"./dist/index.d.cts"},"import":"./dist/index.js","require":"./dist/index.cjs"}},"gitHead":"6d41f24ec5a43c311fef98c4d2bb6f4962974295","scripts":{"lint":"tsc --noEmit","test":"vitest run","build":"tsup"},"_npmUser":{"name":"aegis-kernel","email":"sneh.gabani1999@gmail.com"},"repository":{"url":"git+https://github.com/Snehgabani/aegis-kernel.git","type":"git","directory":"packages/mcp"},"_npmVersion":"10.8.2","description":"Model Context Protocol (MCP) JSON-RPC safety clearance middleware for AI agents","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@aegis-kernel/core":"*"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.3.6","vitest":"^4.1.10","typescript":"^5.7.3","@types/node":"^26.2.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_1.1.0_1787306460255_0.7966929983574831","host":"s3://npm-registry-packages-npm-production"},"deprecated":"Package no longer supported. Contact Support at https://www.npmjs.com/support for more info."}},"time":{"created":"2026-08-19T14:01:56.326Z","modified":"2026-08-30T02:35:40.537Z","1.0.0":"2026-08-19T14:01:56.797Z","1.1.0":"2026-08-21T10:01:00.439Z"},"bugs":{"url":"https://github.com/Snehgabani/aegis-kernel/issues"},"author":{"name":"Sneh Gabani","email":"sneh@aegis-kernel.dev"},"license":"MIT","homepage":"https://snehgabani.github.io/aegis-kernel/","keywords":["mcp","model-context-protocol","ai-agents","json-rpc","guardrails","tool-clearance"],"repository":{"url":"git+https://github.com/Snehgabani/aegis-kernel.git","type":"git","directory":"packages/mcp"},"description":"Model Context Protocol (MCP) JSON-RPC safety clearance middleware for AI agents","maintainers":[{"name":"aegis-kernel","email":"sneh.gabani1999@gmail.com"}],"readme":"# 🛡️ @aegis-kernel/mcp\n\n> **Model Context Protocol (MCP) JSON-RPC 2.0 Safety Clearance Middleware**  \n> *Tool Schema Pinning • Rug-Pull Detection • In-Process Deterministic Pre-Execution Clearance*\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)\n[![TypeScript](https://img.shields.io/badge/TypeScript-5.7-blue.svg)](https://www.typescriptlang.org/)\n[![Node.js](https://img.shields.io/badge/Node.js-%3E%3D18.0-green.svg)](https://nodejs.org/)\n\n---\n\n## 🚀 Overview\n\n`@aegis-kernel/mcp` provides native safety clearance middleware for **Model Context Protocol (MCP)** servers and clients. It intercepts JSON-RPC 2.0 `tools/call` requests, verifies schema stability (preventing tool poisoning and rug-pull attacks), and validates argument invariants in sub-1.5ms.\n\n### Key Capabilities:\n- **Zero-Latency Invariant Clearance**: Validates SQL ASTs, numeric ranges, and PII patterns on tool arguments.\n- **MCP Schema Pinning**: Computes cryptographic SHA-256 hashes of tool schemas upon initialization to detect runtime drift or malicious schema replacement.\n- **Output Sanitization**: Automatically scans and masks leaked secrets and PII from tool outputs before returning results to the LLM.\n- **Confused-Deputy Defense**: Propagates caller identity tokens to ensure tenant-isolated tool access.\n\n---\n\n## 📦 Installation\n\n```bash\nnpm install @aegis-kernel/mcp @aegis-kernel/core\n```\n\n---\n\n## ⚡ Quickstart\n\n```typescript\nimport { AegisMCPMiddleware } from '@aegis-kernel/mcp';\n\n// 1. Initialize MCP Middleware with policy packs\nconst middleware = new AegisMCPMiddleware({\n  mode: 'enforce',\n  packs: ['@aegis/sql-guard', '@aegis/data-guard', '@aegis/finance-guard'],\n  enableSchemaPinning: true,\n  sanitizeOutputs: true,\n});\n\n// 2. Wrap an MCP Server Tool Handler\nconst safeExecuteSqlHandler = middleware.wrapToolHandler(\n  {\n    name: 'execute_sql',\n    description: 'Executes a database query safely',\n    inputSchema: {\n      type: 'object',\n      properties: { query: { type: 'string' } },\n      required: ['query'],\n    },\n  },\n  async (args) => {\n    // This handler will ONLY execute if arguments pass deterministic invariants\n    return await db.query(args.query);\n  }\n);\n```\n\n---\n\n## 📄 License\n\nDistributed under the [MIT License](https://opensource.org/licenses/MIT). Copyright (c) 2026 Sneh Gabani.\n","readmeFilename":"README.md"}