basitalisandhu

basitalisandhu/mcp-egress

Record every host an MCP server contacts, per tool, and fail CI on new ones. Runs a stdio MCP server behind an embedded CONNECT proxy, records host, port and tool for initialize, tools/list and sample calls, writes egress.json, prints Claude Code WebFetch rules and a sandbox allowlist, and warns when a server bypasses proxy variables.

0 stars 0 forks 0 watchers Python MIT License
agent-security ai-agents allowlist ci claude-code cli devsecops egress hacktoberfest llm-security mcp model-context-protocol network-security proxy python security-tools supply-chain-security
View on GitHub
8 Open Issues Need Help Last updated: Oct 4, 2026

Open Issues Need Help

View All on GitHub
Add --format json to mcp-egress diff 7 days ago
help wanted good first issue
basitalisandhu/mcp-egress
0

Record every host an MCP server contacts, per tool, and fail CI on new ones. Runs a stdio MCP server behind an embedded CONNECT proxy, records host, port and tool for initialize, tools/list and sample calls, writes egress.json, prints Claude Code WebFetch rules and a sandbox allowlist, and warns when a server bypasses proxy variables.

Python
#agent-security#ai-agents#allowlist#ci#claude-code#cli#devsecops#egress#hacktoberfest#llm-security#mcp#model-context-protocol#network-security#proxy#python#security-tools#supply-chain-security
Add `--report-out FILE` to save the report next to egress.json 7 days ago
help wanted good first issue hacktoberfest
basitalisandhu/mcp-egress
0

Record every host an MCP server contacts, per tool, and fail CI on new ones. Runs a stdio MCP server behind an embedded CONNECT proxy, records host, port and tool for initialize, tools/list and sample calls, writes egress.json, prints Claude Code WebFetch rules and a sandbox allowlist, and warns when a server bypasses proxy variables.

Python
#agent-security#ai-agents#allowlist#ci#claude-code#cli#devsecops#egress#hacktoberfest#llm-security#mcp#model-context-protocol#network-security#proxy#python#security-tools#supply-chain-security
Check inputSchema parameter descriptions for hidden characters 9 days ago
enhancement help wanted good first issue
basitalisandhu/mcp-egress
0

Record every host an MCP server contacts, per tool, and fail CI on new ones. Runs a stdio MCP server behind an embedded CONNECT proxy, records host, port and tool for initialize, tools/list and sample calls, writes egress.json, prints Claude Code WebFetch rules and a sandbox allowlist, and warns when a server bypasses proxy variables.

Python
#agent-security#ai-agents#allowlist#ci#claude-code#cli#devsecops#egress#hacktoberfest#llm-security#mcp#model-context-protocol#network-security#proxy#python#security-tools#supply-chain-security
Add a `diff` subcommand for two documents 13 days ago
help wanted good first issue hacktoberfest
basitalisandhu/mcp-egress
0

Record every host an MCP server contacts, per tool, and fail CI on new ones. Runs a stdio MCP server behind an embedded CONNECT proxy, records host, port and tool for initialize, tools/list and sample calls, writes egress.json, prints Claude Code WebFetch rules and a sandbox allowlist, and warns when a server bypasses proxy variables.

Python
#agent-security#ai-agents#allowlist#ci#claude-code#cli#devsecops#egress#hacktoberfest#llm-security#mcp#model-context-protocol#network-security#proxy#python#security-tools#supply-chain-security
A composite GitHub Action for the baseline check 19 days ago
help wanted hacktoberfest
basitalisandhu/mcp-egress
0

Record every host an MCP server contacts, per tool, and fail CI on new ones. Runs a stdio MCP server behind an embedded CONNECT proxy, records host, port and tool for initialize, tools/list and sample calls, writes egress.json, prints Claude Code WebFetch rules and a sandbox allowlist, and warns when a server bypasses proxy variables.

Python
#agent-security#ai-agents#allowlist#ci#claude-code#cli#devsecops#egress#hacktoberfest#llm-security#mcp#model-context-protocol#network-security#proxy#python#security-tools#supply-chain-security
Record the resolved IP addresses next to each host about 1 month ago
help wanted good first issue hacktoberfest
basitalisandhu/mcp-egress
0

Record every host an MCP server contacts, per tool, and fail CI on new ones. Runs a stdio MCP server behind an embedded CONNECT proxy, records host, port and tool for initialize, tools/list and sample calls, writes egress.json, prints Claude Code WebFetch rules and a sandbox allowlist, and warns when a server bypasses proxy variables.

Python
#agent-security#ai-agents#allowlist#ci#claude-code#cli#devsecops#egress#hacktoberfest#llm-security#mcp#model-context-protocol#network-security#proxy#python#security-tools#supply-chain-security
Call every tool that needs no arguments automatically about 1 month ago
help wanted good first issue hacktoberfest
basitalisandhu/mcp-egress
0

Record every host an MCP server contacts, per tool, and fail CI on new ones. Runs a stdio MCP server behind an embedded CONNECT proxy, records host, port and tool for initialize, tools/list and sample calls, writes egress.json, prints Claude Code WebFetch rules and a sandbox allowlist, and warns when a server bypasses proxy variables.

Python
#agent-security#ai-agents#allowlist#ci#claude-code#cli#devsecops#egress#hacktoberfest#llm-security#mcp#model-context-protocol#network-security#proxy#python#security-tools#supply-chain-security
Markdown report for pull request comments about 1 month ago
help wanted good first issue hacktoberfest
basitalisandhu/mcp-egress
0

Record every host an MCP server contacts, per tool, and fail CI on new ones. Runs a stdio MCP server behind an embedded CONNECT proxy, records host, port and tool for initialize, tools/list and sample calls, writes egress.json, prints Claude Code WebFetch rules and a sandbox allowlist, and warns when a server bypasses proxy variables.

Python
#agent-security#ai-agents#allowlist#ci#claude-code#cli#devsecops#egress#hacktoberfest#llm-security#mcp#model-context-protocol#network-security#proxy#python#security-tools#supply-chain-security