jadegate.github.io/llms.txt at main · JadeGate/jadegate.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
# JadeGate

> MCP has no security layer. JadeGate adds one.

## What It Is

JadeGate is a transparent security proxy between AI clients and MCP servers. Every tool call passes through 6 security layers before execution. Zero config — `pip install jadegate` and all your MCP servers are protected.

## How It Works

```
AI Client (Claude, Cursor, etc.)
    ↓
  JadeGate Proxy          ← policy, anomaly detection, trust verification
    ↓
  MCP Server (filesystem, github, puppeteer, etc.)
```

On install, JadeGate automatically:
1. Finds all MCP client configs (Claude Desktop, Cursor, Windsurf, Cline, Continue, Zed)
2. Wraps each MCP server with the security proxy
3. Backs up original configs (fully reversible)

## The 6 Security Layers

1. **Policy** — Per-tool allow/deny/ask rules, rate limiting, argument validation
2. **Runtime** — Dynamic call-chain tracking (DAG), anomaly detection, circuit breaker
3. **Transport** — Transparent MCP proxy, intercepts stdio/SSE, no server changes needed
4. **Trust** — TOFU (Trust On First Use) + Ed25519 certificates for server identity
5. **Scanner** — Static analysis of MCP server capabilities, risk scoring
6. **Installer** — Auto-injection into all supported MCP client configs

## Commands

```bash
pip install jadegate    # Install + auto-protect all MCP servers
jadegate status         # Check what's protected
jadegate scan           # Security audit all MCP servers
jadegate uninstall      # Revert all changes, restore original configs
```

## Python SDK Protection

```bash
export JADEGATE=1
python my_agent.py
# All OpenAI/Anthropic SDK tool calls are intercepted
```

Or in code:

```python
import jadegate
jadegate.activate()
```

## Policy Configuration

```json
{
  "default_action": "allow",
  "tool_rules": {
    "filesystem:write_file": { "action": "ask" },
    "shell:exec": { "action": "deny" }
  },
  "rate_limit": { "max_calls_per_minute": 60 }
}
```

## Design Principles

- **Zero config**: pip install = protected
- **Transparent**: MCP servers don't know JadeGate exists
- **Reversible**: jadegate uninstall restores everything
- **Offline**: No telemetry, no cloud, no data leaves your machine
- **Fail-open**: If JadeGate crashes, MCP servers still work

## Links

- GitHub: https://github.com/JadeGate/jadegate
- PyPI: https://pypi.org/project/jadegate/
- Website: https://jadegate.io
- Full reference: https://jadegate.io/llms-full.txt