Agent Cyber Sentinel: zero-trust runtime shield for agents and MCP
GitHub BenniAlencar/agent-cyber-sentinel (Apache-2.0): Tier-0 runtime defense for autonomous agents and MCP servers—prompt-injection/jailbreak firewall, secret leak interceptor with Shannon-entropy redaction, SSRF metadata blocking, tool-call sanitization, and tamper-evident Proof-of-Defense (POD-9) envelopes. Framed as the missing security layer when agents take real actions; CI + pytest suite in-repo.
Save ideas in this browser. Upvotes count across the board.
Enterprise GA for cg-oci, cg-apk, cg-versions, and cg-api so Claude Code/Cursor agents verify image tags, Wolfi package equivalents, EOL status, and org policy/attestations via browser OAuth or chainctl—server-side caps instead of prompt guardrails.
Remote MCP at anaconda.com/api/mcp returns package facts, curated CVEs, org channel policy, and forum hits so Claude Code/Cursor/Codex/Kilo check real conda names and vulns before proposing installs—server cannot mutate your machine; agent still runs conda under your permissions.
Open-source MIT guardrail tracks audience×trust labels across tool calls (algebra, not LLM-as-judge), returns remedy plans (sanitize/authority/subagent) so agents keep ~90% task completion with 0% exfil on their benches—plugs via pre/post tool hooks; docs also as MCP.
Lumovi (OSS Apache-2.0, v1.22.1) is a calm K8s dashboard that doubles as an MCP server: assistants read your clusters as you, and every change waits for approval with a diff, reason and equivalent kubectl. Namespace/RBAC rules constrain what agents may touch; desktop one-click MCP setup or Helm-in-cluster for teams. Pattern: ops UI + HITL gate for agentic cluster work.