AperionAI/shield

What it does

AperionAI/shield is a security proxy designed to protect AI coding agents from executing destructive commands. It intercepts and blocks dangerous tool calls before they reach system resources, preventing irreversible operations like database drops, file deletions, and force pushes. The tool wraps any MCP server (Model Context Protocol) and adds a guardrail layer with supply chain protection through TOFU (Trust On First Use) toolcatalog pinning.

How to set up

Shield operates as an MCP server that can wrap existing MCP servers using stdio or Streamable HTTP transport. Installation involves: 1) Setting up the shield proxy as an intermediary between your AI agent and MCP servers, 2) Configuring which tool calls to block based on patterns, 3) Optionally enabling TOFU catalog pinning for supply chain verification. Detailed setup instructions are available on the GitHub repository.

Key features

• Blocks destructive commands (DROP TABLE, rm -rf, git force-push)
• Compatible with stdio and Streamable HTTP MCP servers
• TOFU toolcatalog pinning for supply chain protection
• Tool description and resource validation
• Rug pull prevention through verified tool catalogs
• Cross-platform support (macOS, Windows, Linux)
• Written in Rust for performance and safety