MCP Defender is a desktop app that automatically secures AI apps like Cursor from a variety of attacks. If it detects the AI trying to do anything malicious on your computer, it alerts you and lets you block or allow the action.
No reviews yetBe the first to leave a review for MCP Defender
Maker
📌
MCP Defender is an open source desktop app that automatically proxies your MCP traffic in AI apps like Cursor, Claude, Windsurf and VSCode. It then scans all requests and responses between the apps and the MCP tools they call. If it detects anything malicious, it alerts you and lets you allow or block the tool call.
While the threat landscape of MCP is still being actively researched, there are dangerous things that MCP Defender can block today. For example, a developer asks Cursor to fix a Github issue with an attached crash log. However, the Github issue was created by an attacker who included secret instructions buried in the crash log. These instructions tell Cursor to send the developer’s SSH keys to a server the attacker controls. MCP Defender detects these malicious instructions and alerts the developer who otherwise may not be careful in running tool calls.
The scanning is currently done via an LLM and checks for things like prompt injection, credential theft (ssh keys, tokens) and arbitrary code execution. You can use an MCP Defender account or provide your own API keys for LLM providers to perform the scanning.
Currently we’ve published a beta Mac build and we’ll soon publish builds for Windows and Linux as well.
Any feedback would be greatly appreciated.
Thanks!
Report
Maker
@masump You can see your log history on the Threats tab to review past alerts. We’ll soon be adding the ability to filter the log history by status, app, tool, time range etc. Thanks for your comment!
Report
@sundeep_gottipati FYI in README footer it says license is CC BY-NC-SA 4.0 but sidebar
@jaschadub Thank you! Just fixed the license to mention AGPL-3.0 license.
Report
MCP Defender is an essential tool for anyone using AI apps like Cursor! By automatically securing these apps from a variety of attacks, it ensures your computer stays safe. With real-time alerts and the ability to block or allow actions, I’m excited to see how it provides an extra layer of protection and peace of mind for users!
@sundeep_gottipati FYI in README footer it says license is CC BY-NC-SA 4.0 but sidebar
AGPL-3.0 license.
@jaschadub Thank you! Just fixed the license to mention AGPL-3.0 license.
MCP Defender is an essential tool for anyone using AI apps like Cursor! By automatically securing these apps from a variety of attacks, it ensures your computer stays safe. With real-time alerts and the ability to block or allow actions, I’m excited to see how it provides an extra layer of protection and peace of mind for users!
Nice tool!