Signet Eval MCP Server
Deterministic policy enforcement for AI agent tool calls. Integrated tool calls pass through user-defined rules before execution. No LLM in the authorization path. Advisory nudges are separate from authorization.
People who need security tools inside Claude, Cursor, VS Code, or another MCP client. The project is written in Rust.
VERIFIED ACTIVE
LAST COMMIT 2026-09-24 · ★ 3 · #195 OF 216 MAINTAINED SECURITY · VERIFIED 2026-09-30
MIT · Rust servers · how we verify → /methodology
01 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
license MIT - declared in the repository
registry namespace io.github.jmcentire is GitHub-verified and matches the repo owner
02 · What Signet Eval can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v3.13.0 · 2026-09-24
Repairs Claude function-hook recovery and error reporting, and releases the optional Claude/Kindex integration. · Hooks recheck current owner state instead of retaining startup conflicts. Confirmed disablement is…
v3.12.2 · 2026-08-28
Antigravity permissions-adapter repair. · Consumes Antigravity's native nested toolCall payload and emits native top-level allow/deny decisions. · Normalizes command, file, multi-edit, and MCP calls into Signet's…
v3.12.1 · 2026-08-01
Durable safety-default release. · Ships the GitHub remote-owner identity guard and embeds its check for atomic first-use installation. · Restores hard denial of ephemeral Task state in favor of Kindex tasks. · Requires…
03 · Who maintains Signet Eval
signet-eval is maintained by jmcentire. It's the only MCP server we track from this author; the repo dates to Mar 2026.
04 · Facts
- repository
- github.com/jmcentire/signet-eval
- category
- security - ranked #195 of 216 actively-maintained security servers as of 2026-09-30.
- release cadence
- 3 releases in the last 90 days (latest 2026-09-24)
- registry
- io.github.jmcentire/signet-eval (active, first published 2026-05-16 · 2 versions)
05 · Signet Eval FAQ
What is Signet Eval?
Deterministic policy enforcement for AI agent tool calls. Integrated tool calls pass through user-defined rules before execution. No LLM in the authorization path. Advisory nudges are separate from authorization.
Is Signet Eval still maintained?
Yes - as of 2026-09-30, its last commit was 2026-09-24 and it shipped 3 releases in the last 90 days. We re-verify nightly.
06 · Alternatives to Signet Eval
Alternatives to Signet Eval
Maintained security servers if Signet Eval isn't the fit.
- OpenWork MCP Gateway Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL. ★ 23,783 · 2026-09-29
- Treg To OpenRouter for tools and data. Compare catalog providers and call them from one hosted MCP endpoint. ★ 3,881 · 2026-09-30
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,109 · 2026-09-23
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 680 · 2026-09-30
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 655 · 2026-09-29
- Decionis CommerceGate MCP Commerce preflights, D365 authorization, signed evidence, and reports; no marketplace or ERP writes. ★ 589 · 2026-09-28
Pairs well with
Servers that cover what Signet Eval doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Shellward · Patch Tuesday · Web Metadata, OpenGraph & Contact Extractor · ServiceNow MCP Server · Observatory
More Rust MCP servers · Rustunnel · Deixis · Audio Analyzer · Baton · Kitewright MCP Server · see all