MCP Defender

MCP Defender is an open source desktop application that protects AI apps on a user's computer from threats carried through the Model Context Protocol. It acts as a secure proxy between AI applications and the MCP servers they call, scanning every tool call in real time. Cursor, Claude, Visual Studio Code and Windsurf are supported. Detection combines LLM analysis with deterministic signatures. It targets prompt injection, tool poisoning, credential theft such as reading or sending SSH keys, arbitrary code execution and remote command injection, and it alerts the user as soon as malicious activity is identified. The app shows MCP traffic and scan activity, lets users manage the signatures used during scanning, and lets them choose their own LLM provider with their own API keys. The code is published on GitHub under the AGPL version 3 license. The site announces that MCP Defender has been acquired by Docker Inc. Published pricing has three tiers. Starter is $0 and includes unlimited members and 250 transactions. Basic is $29.99 per user per month, adds Mainline AI, unlimited teams and unlimited transactions, and includes a seven day free trial. Enterprise has custom pricing and adds advanced security controls and migration support.