protect-mcp

Name: protect-mcp
Author: wshobson

wshobson ★ 42007

This plugin enforces Cedar declarative authorization policies on every Claude Code tool call and produces Ed25519-signed receipts for independent offline verification. It blocks unauthorized tool calls at pre-execution time and appends cryptographically verifiable audit trails to receipts.jsonl.

Security DevOps No API key detected runs shell

Install

> /plugin marketplace add wshobson/agents/tree/HEAD/plugins/protect-mcp

> /plugin install protect-mcp

Source: https://github.com/wshobson/agents/tree/HEAD/plugins/protect-mcp

What it's made of

2 commands · 2 agents · 1 skill · 2 hooks

Commands: 2
Agents: 2
Skills: 1
MCP servers: 0
Hooks: 2 · PostToolUse, PreToolUse

What it needs & plugs into

API keys: none
Paid services: none detected
External tools: evaluate.sh sign.sh
Talks to: nothing external detected

Analyzed 2026-10-31. Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (wshobson).