{"repo":"facebook/mcpguard-dynamic","free":true,"listed":false,"github":"https://github.com/facebook/mcpguard-dynamic","clone":"git clone https://github.com/facebook/mcpguard-dynamic.git","description":"Kernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)","language":"C","stars":71,"topics":[],"license":"MIT","category":"mcp-servers","readme_excerpt":"MCPGuard-Dynamic Kernel-level sandboxing for LLM agent tool calls made through the Model Context Protocol (MCP). MCPGuard sits as a transparent proxy between an MCP client (the agent / runner) and an MCP server subprocess, applying three layered defenses to every tool invocation. The lowest layer is implemented in eBPF and enforces capability policies at the system-call boundary, so a malicious MCP server cannot bypass policy by hardcoding sensitive behavior inside its own implementation. This repository contains the proxy, the eBPF programs, the 14-server / 82-case benchmark, and the evaluation harness used in the accompanying paper Kernel-Level Sandboxing for LLM Agent Tool Calls via eBPF . Architecture Layer Component Purpose ------- ----------- --------- L1 proxy/policy engine.py Per-server capability policy derived from each tool's MCP schema; allowlists for paths, network destinations, processes, env vars. L2 proxy/argument validator.py Application-level inspection of tool-call arguments: path canonicalization, URL validation, prompt-injection detection, env-leak / command-injection detection, sensitive-key scanning, response sanitization. L3 ebpf/ .bpf.c + proxy/ebpf sandbox.py OS-level enforcement: three BPF LSM programs ( file guard , net guard , proc guard ) intercept open() / connect() / execve() , and one tracepoint program ( fork guard ) tracks child processes via sched process fork so policy carries across forks. Six switchable defense configurations ( proxy/pro","default_branch":null,"files":null,"tree":[],"storefront":"/r/facebook","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/facebook/mcpguard-dynamic/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}