producthunt · Developer Tools/GitHub/Security · 10-06 07:01 57 分 ← 返回列表

mcpgawk — Catch MCP servers that change after you approved them

An MCP server can change what its tools do after you approved it. Your agent will call the new one and never notice. mcpgawk records a baseline of every MCP server your agents use, checks behaviour in a sandbox, and sits in the path: once a tool changes after you approved it, the call is refused until you decide. The agent cannot approve its own way past it. Everything runs on your machine. Nothing is uploaded. Free CLI, VS Code extension and MCP server. The gateway tier has a 7-day trial.

五维评分

付费意愿

需求真实度

个人可落地

竞争空间

新鲜度

AI 分析

痛点：MCP 服务器在用户批准后可能悄悄改变工具行为，AI agent 会无感调用新工具，带来供应链安全和越权风险。

目标用户：使用 MCP 的 AI agent 开发者、平台工程团队、安全团队

证据：An MCP server can change what its tools do after you approved it. Your agent will call the new one and never notice. ... once a tool changes after you approved it, the call is refused until you decide. ... The gateway tier has a 7-day trial.

变现：Freemium：免费 CLI/VS Code 扩展吸引开发者，网关层按席位或按调用量订阅，企业版提供私有部署、审计日志和合规报告。

MVP：做一个本地 MCP 代理：记录每个 MCP server 的工具 schema 与行为基线，检测变更后拦截调用并弹出人工审批，不依赖云端，先支持 VS Code 和 CLI。

竞品：Invariant Labs mcp-scan、MCP Guardian、Docker MCP Gateway

摘要：ProductHunt 发布 mcpgawk，针对 MCP 服务器审批后变更工具行为导致 AI agent 无感调用新工具的安全风险。产品提供本地基线记录、沙箱检查和拦截网关，免费 CLI/VS Code 扩展/MCP server，网关层有 7 天试用。目前 0 投票，付费意愿尚未被用户数据验证。