Official description๐ ๐ ๐ ๐ ๐ช ๐ง - Real-time security framework for MCP servers that detects and blocks malicious agent behavior by analyzing tool call patterns and intent.
Config template (adjust for your client)
claude mcp add mcp-dandan -- npx -y mcp-dandan
A pasteable skeleton generated from the repository name. Check the project README for the exact package and arguments.
Star count
67 โ ยท 82ch/MCP-Dandan ยท read from the GitHub search API ยท (checked 2026-10-16 20:00:20)
Source
collected from the punkpeye/awesome-mcp-servers list ยท type: MCP server
Harvest history
first seen 2026-10-09 ยท last seen 2026-10-16 ยท seen 32ร ยท listed by 10 sources
Score
score 1,003 ยท 67 โ ยท 10 sources ยท mcp
FAQ (answers come from our records)
How do I install it?
We did not find an install command for this repository (our install coverage is only about 4%). Check its README or releases page.
Who is it for?
We filed it under these tags: MCP ๆๅก. The tags come from the entry itself, not a taxonomy we imposed.
Who maintains it?
repository 82ch/MCP-Dandan๏ผfirst catalogued 2026-10-09๏ผlast seen 2026-10-16ใThere is no official certification or quality rating here โ we record sources and dates only.
MCP-Dandan Overview MCP-Dandan is an integrated monitoring service that observes MCP (Model Context Protocol) communications and detects security threats in real time. It features a modern desktop UI built with Electron for easy monitoring and management. MCP-Dandan has been featured and listed across **MCP and AI security communities, open-source collections, and platforms**: * Awesome MCP Security โ Tools & Code * Awesome Claude โ Security MCP Servers * Adversarial AI Digest โ January 2026 (LinkedIn) * Enterprise DNA โ MCP Servers Directory * mdskills.ai โ MCP-Dandan https://github.com/user-attachments/assets/928686ab-a5aa-4486-8d8e-d4a9592adc3e Features - **Real-time MCP Traffic Monitoring**: Intercepts and analyzes MCP communications - **Multi-Engine Threat Detection**: - Command Injection Detection - File System Exposure Detection - PII Leak Detection(custom rules supported) - Data Exfiltration Detection - Tools Poisoning Detection (LLM-based) - **Desktop UI**: Electron-based application with interactive dashboard - **Interactive Tutorial**: Built-in tutorial system for new users - **Blocking Capabilities**: Real-time threat blocking with user control - **Cross-Platform**: Supports Windows, macOS, and Linux Quick Start Installation Running the Application The server will start on http://127.0.0.1:8282 and the Electron desktop app will launch automatically. Project Structure Detection Engines 1. Command Injection Engine Identifies potential command injection patterns in tool calls. 2. File System Exposure Engine Monitors unauthorized file system access attempts. 3. PII Leak Engine (custom rules supported) Detects potential PII leakage with built-in rules and optional user-defined customization. 4. Data Exfiltration Engine Identifies suspicious data transfer patterns. 5. Tools Poisoning Engine (LLM-based) Uses semantic analysis to detect misuse of MCP tools: - Compares tool specifications vs actual usage - Scores alignment (0-100) with detailed breakdown - Auto-categorizes severity: none/low/medium/high Engine Setting https://github.com/user-attachments/assets/3d6f2304-0a6b-492e-9f2d-bba76df98b4c Input your MISTRAL_API_KEY to enable the Tools Poisoning Engine, and configure detection settings as needed. Desktop UI Features - **Real-time Dashboard**: Monitor MCP traffic and threats in real time - **Interactive Tutorial**: Learn how to use the system with step-by-step guides