mcp-armor

Drop-in Rust sidecar for MCP servers — scans tool calls for prompt injection, validates Ed25519 manifest signatures, blocks marketplace-poisoning vectors. <5ms p99 overhead. Defense against OX Security MCP advisory (10+ CVEs, April 2026).

Installation

MCP client config (paste into mcp.json)

{
  "mcpServers": {
    "armor": {
      "command": "npx",
      "args": [
        "ghcr.io/studiomeyer-io/mcp-armor:0.8.2"
      ]
    }
  }
}

Agent install prompt

Copy and paste into Cursor / Claude / other agents to install this MCP for you

Please read this MCP repository and install it into my current environment:
https://github.com/studiomeyer-io/mcp-armor

Known working client config (can write into mcp.json):
{
  "mcpServers": {
    "armor": {
      "command": "npx",
      "args": [
        "ghcr.io/studiomeyer-io/mcp-armor:0.8.2"
      ]
    }
  }
}

Please: 1) check README for deps and env vars; 2) write config for my client; 3) if secrets are missing, tell me what to fill — do not invent values.

GitHub

Related servers