Armor

What is Armor?

Drop-in Rust sidecar for MCP servers — scans tool calls for prompt injection, validates Ed25519 manifest signatures, blocks marketplace-poisoning vectors. <5ms p99 overhead. Defense against OX Security MCP advisory (10+ CVEs, April 2026).

How to use Armor?

The README includes setup instructions such as mcp-armor wrap -- npx -y @modelcontextprotocol/server-filesystem /tmp.

Key features of Armor

• off — disabled
• Dynamic linker: LD_PRELOAD, LD_LIBRARY_PATH, DYLD_INSERT_LIBRARIES, DYLD_LIBRARY_PATH
• Language runtime: NODE_OPTIONS, PYTHONPATH, JAVA_TOOL_OPTIONS
• mcp-armor (this one) — runtime defense sidecar: scans tool calls, verifies signed manifests, blocks known-bad CVEs
• mcp-herald — static migration linter for the MCP 2026-07-28 spec

Use cases of Armor

• Connect an MCP-compatible client to this repository's service.
• Review the README-backed setup before enabling it in production.

FAQ from Armor

Where is the source code for Armor?

The source code is linked from the repository URL on this page.

Does Armor include a standard MCP config?

If the README contains a parseable MCP configuration block, it is shown in the Config tab.