Skip to content

Releases: KryptosAI/mcp-seatbelt

Release list

v0.5.0 — Defense-in-Depth MCP Runtime Security

v0.5.0 — Defense-in-Depth MCP Runtime Security Latest
Latest

Choose a tag to compare

View all tags
@KryptosAI KryptosAI released this 24 Jul 04:17
v0.5.0
3b772a7

v0.5.0 — 8 Cybersecurity Capabilities + Performance Optimization

New in this release

  • 8 cybersecurity capabilities: RBAC, Threat Intel, Attack Chains, OWASP mapping, Compliance tagging, Honeytokens, Forensic Capture, Schema Validation, Fuzzing
  • Performance: 35-74% throughput improvement (1,900→3,000+ req/s), 2.4x faster policy evaluation
  • EPIPE fix: Proper stdin error handling for dead child processes
  • Docker: Auto-publish to GHCR on release
  • GitHub Action: v0.4 published, ready for marketplace listing
  • ARCHITECTURE.md: 441-line comprehensive architecture documentation

📄 Technical Whitepaper — 1,464 lines covering the full security platform

Install

npm install -g @kryptosai/mcp-seatbelt
# or
brew install mcp-seatbelt
# or
docker pull ghcr.io/kryptosai/mcp-seatbelt:latest

Quick Start

npx @kryptosai/mcp-seatbelt init    # detect MCP configs, assess risk
npx @kryptosai/mcp-seatbelt proxy   # start enforcing proxy on :9420
npx @kryptosai/mcp-seatbelt check   # quick risk summary
Assets 2
Loading

v0.4.0 — 8 Cybersecurity Capabilities

v0.4.0 — 8 Cybersecurity Capabilities

Choose a tag to compare

View all tags
@KryptosAI KryptosAI released this 19 Jul 02:05
v0.4.0
b8b305e

v0.4.0 — Defense-in-Depth for MCP Runtime Security

Eight new cybersecurity capabilities integrated into mcp-seatbelt:

  • RBAC: Per-agent access control with casbin (admin/agent roles, wildcard permissions)
  • Threat Intel: IOC reputation checks via ThreatFox API with 1-hour cache
  • Attack Chains: XState state machine detects multi-step attack patterns
  • Schema Validation: ajv validates tool arguments against JSON Schema, path traversal detection
  • OWASP Mapping: 13 risk rules mapped to OWASP LLM Top 10 categories
  • Compliance: SOC2, HIPAA, GDPR, ISO 27001, PCI-DSS framework tags on every policy rule
  • Honeytokens: Injects decoy credentials, detects unauthorized access
  • Forensic Capture: Records full request/response pairs as .mcpcap.json

485 tests (up from 354). 18 test files (up from 12).

📄 Read the full technical whitepaper

New CLI Commands:

  • mcp-seatbelt fuzz — Fuzz a policy against tool schemas
  • mcp-seatbelt record — Start proxy in forensic recording mode
  • mcp-seatbelt rbac-init — Initialize RBAC model and policy

Install:

npm install -g @kryptosai/mcp-seatbelt
# or
docker pull ghcr.io/kryptosai/mcp-seatbelt:latest
Loading