claude

protect-mcp

Cedar policy enforcement + Ed25519 signed receipts for every Claude Code tool call. First cryptographic governance plugin — decisions are policy-gated before they run and every decision produces a tamper-evident receipt verifiable offline.

0 on GitHubby Tom Farleyv0.1.1MITupdated 4 months agogovernance
/

Plugin protect-mcp from marketplace claude-code-workflows in yo-steven/agents-exploration-20260523. Commands read from the repo's manifest — 1 month ago.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (1)

  • protect-mcp-setup

    Configure Cedar policy enforcement and Ed25519 signed receipts for Claude Code tool calls. Use when setting up projects that need cryptographic audit trails, policy-gated tool execution, or compliance-ready evidence of agent actions.

Slash commands (2)

  • /protect-mcp:audit-chain

    Walk the receipt chain in ./receipts/ verifying every signature and hash link. Detects insertions, deletions, and tampering across the entire audit trail.

  • /protect-mcp:verify-receipt

    Verify a single Ed25519-signed receipt file. Returns exit 0 if valid, 1 if tampered, 2 if malformed.

Subagents (2)

  • policy-enforcer

    Cedar policy author and reviewer for Claude Code tool calls. Writes, audits, and explains Cedar policies that govern Bash, Edit, Write, WebFetch, and other tools. Use when you need declarative, formally verifiable rules for what an AI agent can and cannot do in a project.

  • receipt-verifier

    Expert in Ed25519 signed receipts, JCS canonicalization, hash chains, and offline verification. Use when you need to verify receipt authenticity, audit a receipt chain, detect tampering, or explain why verification failed.

Hooks (2)

  • PreToolUse

    npx [email protected] evaluate --policy "${PROTECT_MCP_POLICY:-./protect.cedar}" --tool "$TOOL_NAME" --input "$TOOL_INPUT" --fail-on-missing-policy false

  • PostToolUse

    npx [email protected] sign --tool "$TOOL_NAME" --input "$TOOL_INPUT" --output "$TOOL_OUTPUT" --receipts "${PROTECT_MCP_RECEIPTS:-./receipts/}" --key "${PROTECT_MCP_KEY:-./protect-mcp.key}"

View source on GitHub veritasacta.com

More from yo-steven/agents-exploration-20260523

All 82 plugins →

Modern Python development with Python 3.12+, Django, FastAPI, async patterns, and production best practices

16 skills · 1 command · 3 agents

0

Backend API design, GraphQL architecture, workflow orchestration with Temporal, and test-driven backend development

9 skills · 1 command · 8 agents

0

Orchestrate multi-agent teams for parallel code review, hypothesis-driven debugging, and coordinated feature development using Claude Code's Agent Teams

6 skills · 7 commands · 4 agents

0

ui-design

claude

Comprehensive UI/UX design plugin for mobile (iOS, Android, React Native) and web applications with design systems, accessibility, and modern patterns

9 skills · 4 commands · 3 agents

0

Cloud architecture design for AWS/Azure/GCP/OCI, Kubernetes cluster configuration, Terraform infrastructure-as-code, hybrid cloud networking, and multi-cloud cost optimization

8 skills · 7 agents

0

LLM application development with LangGraph, RAG systems, vector search, and AI agent architectures for Claude 4.6 and GPT-5.4

8 skills · 3 commands · 3 agents

0

Similar plugins

Security default for organizations: seated outermost, it keeps the organization's classic hooks, prompt content, settings, tool policy and pinned environment out of reach of the plugins a person installs, and adds no policy of its own; one managed option, allowManagedModsOnly, limits mods to the organization's.

anthropics/claude-code 155,476

Security review, dependency scanning, policy gates, and CVE monitoring

2 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

govtribe

claude

Government contracting research and capture workflows in Claude: opportunity and pipeline briefs, bid/no-bid and competitor analysis, price-to-win and proposal prep, powered by the GovTribe connector.

8 skills · 1 MCP server

anthropics/claude-plugins-official 47,076

protect-mcp

claudecodex

Cedar policy enforcement + Ed25519 signed receipts for every Claude Code tool call. First cryptographic governance plugin — decisions are policy-gated before they run and every decision produces a tamper-evident receipt verifiable offline.

1 skill · 2 commands · 2 agents · hooks

wshobson/agents 42,461

Streamline people operations — recruiting, onboarding, performance reviews, compensation analysis, and policy guidance. Maintain compliance and keep your team running smoothly.

9 skills · 5 MCP servers

anthropics/knowledge-work-plugins 35,601

Per-deal-and-packaging Commercial domain. v2.8.0 ships 8 skills: orchestrator + pricing-strategist (model picker + Van Westendorp WTP + packaging) + deal-desk (deal scorer + discount approval routing + redline) + partnerships-architect (5-tier classifier + joint GTM + revshare modeler) + channel-economics (cost-to-serve + ROI + mix optimizer) + commercial-policy (data-backed discount matrix + exception flow + linter) + rfp-responder (Shipley structured RFP/RFI/RFQ + win-theme + winrate predictor, context: fork) + commercial-forecaster (4Q-weighted bookings + cohort NRR/GRR + funnel-confidence with mandatory assumption disclosure). Hard rules: pricing outputs model+range (never a single number), deal outputs route to named human approver (never auto-approve), forecast outputs surface conversion assumption, RFP never invents claims for GAP requirements. 21 stdlib Python tools, 28+ reference docs. Distinct from business-growth (sales execution), c-level-advisor/cro-advisor (strategic), finance (close+report).

8 skills · 9 commands · 1 agent

alirezarezvani/claude-skills 29,725

Maintain protect-mcp?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins82 plugins