rudraneel93/mcp-guardian

**A safety layer between your AI assistant and the tools it uses.**
**Version 4.1.8** · Website · npm · Install & troubleshooting · Changelog
What's new in 4.1.8
- **Incident policy workflow** — Enterprise AI investigation drawer can generate, preview, accept, or reject blocking rules from incidents
- **npm publish hardening** — ordered publish script with registry dep resolution checks and clean-install verification before server goes live
- **Dashboard stability** — fix React hooks ordering in Security/Health panels that caused error #310 on load
What's new in 4.1.7
- **Active Rules controls** — Security → Policy now includes list/search, soft disable/enable, and hard delete operations synced to YAML
- **Policy runtime semantics** — enabled: false is honored across rule strategies with backward-compatible defaults
- **Policy mutation APIs** — cloud + local dashboard endpoints for list/toggle/delete with updated README guidance
What's new in 4.1.6
- **mcp-guardian start** — one command for proxy + web dashboard on port 4000 (local dev defaults)
- **mcp-guardian setup** — one-shot install for git clones (pnpm install, build, dashboard SPA)
- **npm tarball** — prebuilt dashboard UI (deploy/dashboard-spa/out/) built at publish time
- **Install guide** — expanded troubleshooting in README and docs/INSTALL.md
What's new in 4.1.5
- **npm install** — fixes broken @mcp-guardian/server@4.1.4 registry manifest (workspace: deps). Use **4.1.5+**.
What's new in 4.1.4
- **mcp-guardian onboard from global npm** — resolves the installed package root (not cwd); writes guardian-configs/ under your current directory; ships scripts/guardian-proxy.sh and policy-audit.yaml in the npm tarball
What's new in 4.1.3
**npm install fix** — registry manifest now matches published tarballs (^4.1.3 semver deps, not workspace:). Use @mcp-guardian/server@4.1.3 or later. Publish via ./scripts/publish-npm-all.sh (server/CLI ship from .tgz so metadata stays correct).
What's new in 4.1.1
**npm install hygiene** — fixes supply-chain scanner findings from 4.1.0:
- Published tarballs no longer include postinstall or other lifecycle scripts
- workspace: dependencies are rewritten to semver (^4.1.1) at pack time
- Publish **all** packages via ./scripts/publish-npm-all.sh (core → plugin-sdk → server → cli)
What's new in 4.1.0
**Industry roadmap plan compliance** — runtime verification and dashboard wiring for all eleven fleet-wide modules (A1–C5, B1–B3):
- **guardian roadmap audit** — CLI + GET /api/agentic/plan-compliance/audit verify every shipped module; exit 0 when production-ready
- **Dashboard Agentic AI panels** — PlanCompliance, Reputation, ZeroTrust, FederatedLearning, Observatory mesh sync, SandboxWizard captured-traffic scorecard, ChainGraph (A1)
- **Protection home strip** — roadmap compliance score on the main Protection tab with link to Agentic AI
- **A1 ONNX graph path** — optional fleet chain classifier via GUARDIAN_FLEET_GRAPH_ONNX_MODEL
- **B3 MPC-lite masking** — pairwise-masked federated gradients (GUARDIAN_FEDERATED_MPC)
- **B2/B1 mesh relays** — observatory and reputation mesh publish/pull; dev stub via GUARDIAN_OBSERVATORY_STUB
- **Docs & env** — guardian roadmap * commands documented; production env vars in .env.example
Run guardian roadmap audit --json or open **Agentic AI → Overview** in the dashboard to confirm 100% compliance.
What's new in 4.0.0
**Industry-standard MCP protection** — Guardian moves from per-call filtering to fleet-wide, cross-agent security:
- **MTX v1** — open threat exchange format (@mcp-guardian/mtx) + cloud hub
- **Guardian Certified MCP** — HMAC attestation, persistent registry, verification API
- **Multi-step attack chains** — collusion detector + session-chain graph with proxy enforcement
- **Capability graph & intent binding** — tool/resource graph and session intent allowlists
- **Agent reputation ledger** — persistent scores with proxy enforcement
- **Dynamic sandbox tiers** — shadow / redact / allow with RL-ready persistence
- **Protocol fuzzer** — expanded corpus with real block validation and cert gates
- **Policy simulator** — /api/policy/simulate + ab_test_policy MCP tool
- **Incident playbooks & AI investigator** — webhook/isolate executors; Threat Lab–linked investigations
- **Compliance evidence runner** — live policy + audit wired to SOC2/HIPAA/PCI/FedRAMP/ISO mappings
- **guardian-bench** — mcp-guardian bench CLI + public leaderboard
See CHANGELOG.md for 3.4.1 production hardening (JWKS refresh, payload limits, SIEM on all block paths, audit retention).