nowfound

Life & fun · November 21, 2025

GS

GuardiAgent – Sandboxing / permission model for MCP servers

Anthropic's Model Context Protocol (MCP) has made it easy to spin up servers that expose tools and data to LLMs. A lot of these MCP servers run locally because they need access to your files, shell, browser, etc. The problem: they typically run with the same privileges as your user. If a server is buggy, misconfigured, or prompt-injected, it can do anything you can do: read SSH keys, exfiltrate dotfiles, poke around in private repos, etc. Our research group is working on this by adding a security manifest (inspired by the Android app manifest) plus a local policy enforcement engine that…

GuardiAgent – Sandboxing / permission model for MCP servers launched on November 21, 2025 with 9 votes, #1,143 of 9,796 launches that month and more than 75% of that year's launches.

Visit guardiagent.com ↗Alternativestop 12% of November 2025

What it does

Runtime security for AI agents and Model Context Protocol servers. Prevent data exfiltration, tool poisoning, and system attacks.

Use the GuardiAgent Framework to secure your AI Agent. Encapsulate the least common denominator in agentic software: the MCP server. To use the GuardiAgent Security Sandbox, use the following quick start steps. GuardiAgent is not dependent on a specific AI framework, it works with all SDKs. However, this quickstart shows how to use GuardiAgent with the OpenAI Agent SDK. Currently, we support the OpenAI Agent SDK out of the box with an SDK specific implementation. To setup a new project and use the openAI Agent SDK, you'll need to initialize the project and add its dependencies. uv init uv add openai-agents uv add https://github.com/GuardiAgent/python-mcp-sandbox-openai-sdk.git Walk-through…from guardiagent.com

In the maker’s words, at launch

Anthropic's Model Context Protocol (MCP) has made it easy to spin up servers that expose tools and data to LLMs. A lot of these MCP servers run locally because they need access to your files, shell, browser, etc. The problem: they typically run with the same privileges as your user. If a server is buggy…

Does a similar job

all alternatives →
  • Anthropic's MCP Server Directory2024 · glama.ai · ▲11

    I started this project because I believe MCP has the potential to transform how AI models interact with external resources, but the ecosystem is still very fragmented. There's no central place to discover and compare all the server implementations available, which makes adoption and experimentation harder for developers. I initially built the GitHub repo awesome-mcp-servers (https://github.com/punkpeye/awesome-mcp-servers/), and it's been amazing to see the community contribute to it. Now, I'm taking it further with a directory that automates many tasks—introspecting…

  • Representing Agents as MCP Servers2025 · github.com · ▲58

    Hey HN! A few months ago we shared mcp-agent (https://github.com/lastmile-ai/mcp-agent) [1][2], a lightweight framework that implements every agent pattern from Anthropic’s Building Effective Agents blog [3] and handles MCP server/client management seamlessly. Our core bet is that connecting LLMs to tools, resources, and external systems will soon be MCP-native by default. Today we're launching a significant update: Agents as MCP servers. Currently "agentic" behavior exists only on the MCP client side – clients like Claude or Cursor use MCP servers to solve tasks.…

  • ContextGuard2025 · github.com · ▲12

    I built ContextGuard after discovering that 43% of MCP servers have critical security vulnerabilities. MCP (Model Context Protocol) is the new standard that lets Claude Clients(Desktop, Windsurf, Cursor, etc.) access external tools and data sources - think of it as a plugin system for AI assistants. The problem: When you give those clients access to your filesystem, databases, or APIs through MCP servers, you're opening up serious attack vectors. Prompt injection, data leakage, and path traversal attacks are all possible. Most developers building MCP servers don't have security expertise,…

  • MCP Cloud2025 · mcp-cloud.ai · ▲52

    Deploy Model Context Protocol (MCP) servers with ease. Scale your AI models seamlessly with our cutting-edge platform.

  • Blueprint MCPNov 2025 · blueprint-mcp.railsblueprint.com · ▲9

    Hi HN, I wrote a book on the Model Context Protocol (MCP) – the open standard from Anthropic that lets AI agents connect to external tools and data sources. I'm an RPA/automation practitioner (CEO of Niuexa, LinkedIn Learning instructor) and I noticed there was no comprehensive resource covering MCP architecture, security patterns, and enterprise deployment strategy. So I wrote one. The book covers: - MCP architecture deep dive (servers, clients, hosts, transport layers) - 20-point security checklist for MCP deployments - EU AI Act compliance for agentic systems - Real-world breach…

  • MCP Server with HTTP support instead of stdio/sse2025 · twitter.com · ▲11

    Admittedly I work on this, but I anthropic's decision to finally embrace http, auth (at least a little), and other RFCs that are coming out is just great. With OpenAI behind it too, this ecosystem will be built around projects like this. Not saying it's MCP or not, but it'll be one of them

More life & fun this month

the category →

Source: Show HN post ↗ · launch text quoted in part

Launched alongside, November 2025

the whole month →
  • Guideflow▲1,338

    Create interactive product demos and step-by-step guides in seconds with Guideflow, the leading AI-powered demo automation tool.

    AI · Nov 2025 · guideflow.com

  • Hardware and software projects by Ali Roberts

    Life & fun · Nov 2025 · bitsnpieces.dev

  • Welltory▲1,028

    Measure your wellness. Use data to feel great every day.

    Work · Nov 2025 · welltory.com

  • Gemini 3▲1,016

    Bring any idea to life with multimodal capabilities

    AI · Nov 2025 · blog.google

  • TrustMRR▲833

    LLM Gateway is a b2b artificial intelligence based in United States, founded in 2025. $259,539/month in verified Stripe revenue. $78,764 MRR. Ahrefs Domain Rating 52/100. growing 55% month-over-month. Track LLM Gateway's verified metrics on TrustMRR.

    Growth · Nov 2025 · trustmrr.com

  • Boing▲782

    Life & fun · Nov 2025 · boing.greg.technology