Viewing profile — gsundeep

Agreed, I think adding guardrails to this would be really useful to ensure the AI only has limited permissions to these services (or asking for some sort of confirmation before mak…

Currently we are only recording which tools were requested by the MCP client. We don't store details of the executed tool, neither the arguments nor the response. Currently we are …

We are thinking of open sourcing it, the current codebase requires Cloudflare Workers so it will take some changes to make it more generic. Thank you for the feedback!

My friends and I built MCP Jetpack which makes it really easy to start using MCP. It’s an MCP server that automatically finds and executes the right tools needed to accomplish your…

We’ll prioritize adding support for this client - thanks!

We'll soon be adding the ability to have multiple models perform the scan in parallel, so any attack would have to bypass all of the models.

Thanks for your comment - MCP Defender sits between the MCP client and server, it doesn't need to worry about the protocols that the server communicates with to other services.

This is certainly a valid concern. We'll soon be adding the ability to have multiple models perform the scan in parallel, so any attack would have to bypass all of the models.

With the default signatures, source code would not be treated as malicious. However, you can add custom signatures and detect whatever you'd like. We'll soon be adding deterministi…

MCP Defender sits between the MCP client and server. If you use Cursor for example, MCP Defender rewrites your Cursor MCP config file so that all MCP servers point to the MCP Defen…

This is really interesting, I'll check it out. At least in its current form this seems like it would take some effort to setup - we're focusing heavily on making MCP Defender easy …

We used Cursor + MCP tools like Cloudflare, Linear and Github to build and deploy a lot of MCP Defender, so I think the value is real. I had the same thought about it feeling like …

I had the same thought while building this, but I really feel a tool like this is needed as MCP has a lot of surface area for attacks. Any MCP server that gets hacked exposes all u…

While Cursor and other apps can include security checks in their system prompt, MCP Defender provides an extra unified layer of security across all apps. Also, we're going to be ad…

We'll be adding the ability to run MCP Defender through a local LLM soon, so using that approach no data will leave your computer to perform a scan. Yes, there is a delay for MCP e…

We're planning to add deterministic rules on top of the current LLM based ones

Thanks! Yes - which client are you using? We'll add support for it

Hi HN, MCP Defender is an open source desktop app that automatically proxies your MCP traffic in AI apps like Cursor, Claude, Windsurf and VSCode. It then scans all requests and re…

Not yet, but that sounds like a great idea as watch apps are often a lot simpler than iOS ones. I’ll put that on the roadmap - thanks!

Sorry about that - can you try one more time? I just added some additional logging

Spawn apps can use the accelerometer - thanks for pointing this out, I'll clarify the website. I pasted your prompt and got this: https://imgur.com/a/3Wg8AuK During the recording, …

I totally agree! When you export your app in Spawn, it’s exported as an Xcode project and you can make code modifications from there

I made some slight modifications to your prompt and got something working: Here's the prompt: https://i.imgur.com/lUjLTsd.png Plain text: https://pastebin.com/HTUjcy7M The two diff…

Thanks for giving it a try! I just took a look at your prompt and it looks well defined. I'll investigate the generated code and reply back here.

That's a fair point, I can't say for certain that tools like Spawn will be able to build really complex software. However, I think there's a ton of software that could be built wit…