rohan-protocol/sdk

### Official Model Context Protocol (MCP) Server & Security Gateway
The in-memory security proxy preventing LLM context leaks, credential exfiltration, and prompt injections during tool execution.
> 📦 Official Open-Source MCP Server Monorepo
> The core Model Context Protocol (MCP) server implementation is located directly in this repository at packages/mcp/ and distributed on npm as @rohan-protocol/mcp.
Run from Source • MCP Tools • Client Setup • Architecture • Security
> ⚠️ Public Beta (v0.6.2): Rohan currently enforces client-side RAM witness isolation, V-01 semantic policy firewalls, and V-02 deterministic memory zeroization (zeroize) to shield MCP tool calls while native client-side WASM ZK-SNARK proving circuits are under active research (Milestone 1).
## ⚡ The Problem: Plaintext Context Leaks in MCP
The Model Context Protocol (MCP) connects autonomous agents to tools. However, transport encryption (TLS) only protects data in flight — at the host boundary, standard MCP tools execute in cleartext:
text
🔴 WITHOUT ROHAN (Standard MCP)
Agent calls tool ➔ { "apikey": "sklive...", "dbpassword": "secret" } in plaintext
➔ Leaked directly into LLM conversation context & inference logs
➔ Permanent risk of context exfiltration & prompt injection
🟢 WITH ROHAN SHIELD
Agent calls tool ➔ Arguments evaluated strictly in isolated client RAM
➔ V-02 Zeroize wipes witness memory immediately from volatile memory
➔ Zero plaintext parameters ever enter the model context window
## 🛠️ Running the MCP Server from Source
This repository contains the complete open-source MCP server implementation. You can clone and run the server locally over standard stdio:
bash
# 1. Clone the repository
git clone https://github.com/rohan-protocol/sdk.git
cd sdk
# 2. Install dependencies & build packages
npm install
npm run build
# 3. Start the MCP Server directly over stdio
node packages/mcp/dist/server.js
Or run directly via npx without cloning:
bash
npx -y @rohan-protocol/mcp@latest
## 🔧 Exposed MCP Tools
The @rohan-protocol/mcp server registers standard Model Context Protocol tool endpoints over JSON-RPC:
| MCP Tool | Description | Input Parameters |
| rohanzkhandshake | Evaluates tool execution parameters in ephemeral RAM, strips prompt injections, generates a cryptographic 32-byte intent commitment, and anchors state transitions gaslessly to Midnight. | targetAgentId (string), intent (string), privatePayload (object) |
## 🚀 Universal MCP Client Setup
### 1. Claude Desktop
Add rohan-shield to your claudedesktopconfig.json:
json
"mcpServers": {
"rohan-shield": {
"command": "npx",
"args": ["-y", "@rohan-protocol/mcp@latest"],
"env": {
"ROHANRELAYERURL": "https://api.rohanprotocol.network/api/v1/handshake"
### 2. Cursor IDE & Windsurf
1. Navigate to Settings → Features → MCP Servers → Add New MCP Server.
2. Set the name to rohan-shield.
3. Set the type to command.
4. Use the command: npx -y @rohan-protocol/mcp@latest
## 📁 Monorepo Structure
text
rohan-protocol/sdk
├── packages/
│ ├── mcp/ # 🤖 The Official Model Context Protocol (MCP) Server (Stdio)
│ ├── sdk/ # ⚙️ Core in-memory commitment engine & relayer client
│ └── webmcp/ # 🌐 React / Next.js browser hooks with V-07 DOM isolation