{"repo":"step-security/dev-machine-guard","free":true,"listed":false,"github":"https://github.com/step-security/dev-machine-guard","clone":"git clone https://github.com/step-security/dev-machine-guard.git","description":"Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.","language":"Go","stars":170,"topics":["ai-agents","endpoint-security","mcp-servers","supply-chain-security","vscode-extensions"],"license":"Apache-2.0","category":"mcp-servers","readme_excerpt":"StepSecurity Dev Machine Guard Scan your dev machine for AI agents, MCP servers, IDE extensions, suspicious files, and risky package-manager configs — in seconds. Why Dev Machine Guard? Developer machines are the new attack surface. They hold high-value assets — GitHub tokens, cloud credentials, SSH keys — and routinely execute untrusted code through dependencies and AI-powered tools. Recent supply chain attacks have shown that malicious VS Code extensions can steal credentials, rogue MCP servers can access your codebase, and compromised npm packages can exfiltrate secrets. EDR and traditional MDM solutions monitor device posture and compliance, but they have zero visibility into the developer tooling layer: Capability EDR / MDM Dev Machine Guard --------------------------- :-------: :---------------: IDE extension audit Yes AI agent & tool inventory Yes MCP server config audit Yes Package scanning (Node.js, Homebrew, Python, system) Yes Package-manager config audit (registry, cooldown, auth) Yes Suspicious file / IOC detection Yes Cross-platform (macOS, Windows, Linux) Yes Yes Device posture & compliance Yes Malware / virus detection Yes Dev Machine Guard is complementary to EDR/MDM — not a replacement. Deploy it alongside your existing tools via MDM (Jamf, Kandji, Intune) or run it standalone. Quick Start The steps below install the binary directly and are intended for community users evaluating Dev Machine Guard on a single machine. Enterprise customers should not install ","default_branch":null,"files":null,"tree":[],"storefront":"/r/step-security","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/step-security/dev-machine-guard/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}