MCP-Defender
Desktop app that automatically scans and blocks malicious MCP traffic in AI apps like Cursor, Claude, VS Code and Windsurf.
Links
README
From the repo.
MCP Defender
Automatically protects MCP traffic in AI apps
MCP Defender has been acquired by Docker Inc.
🛡️ MCP Defender is a desktop app that protects AI apps like Cursor from a variety of attacks.
🚦 All MCP tool call requests and responses from AI apps are automatically proxied through MCP Defender.
🔎 The intercepted data is then checked against a set of signatures.
🔐 If anything harmful is detected, MCP Defender alerts you and asks if you want to allow or block the tool call.
Demos
https://github.com/user-attachments/assets/363ae2b1-e395-4cdc-b5ca-e9862baf89c3
Quick Start
Alternatively you can clone the git repo, and run it as follows:
# Install dependencies
npm install
# Start app
npm start
Which apps are automatically protected?
MCP Defender protects Cursor, Claude, Visual Studio Code and Windsurf.
License
MCP Defender is licensed under the AGPL-3.0 license. For more details, see the LICENSE.
Collected info
- ★ 256 stars
- ⎇ 43 forks
- Language: TypeScript
- Source updated: 9/21/2026
Config for your environment
Replace {MCP_ENDPOINT_URL} with this MCP’s endpoint URL (from its repo or docs above). No API key — you connect directly.
Tool
OS
Config file: ~/.cursor/mcp.json
{
"mcpServers": {
"mcp-server": {
"url": "{MCP_ENDPOINT_URL}"
}
}
}Paste into mcpServers in the config file. Restart Cursor after saving.
If this MCP is also published on mcpchannel.ai, you can subscribe from Browse and use the gateway config there instead.