Scopeblind MCP

Security gateway for MCP servers. Shadow-mode logs by default, per-tool policies, optional local Ed25519 receipts, and verification-friendly audit output.

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-07-03 · ★ 9 · #86 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install Scopeblind MCP

Claude Code

claude mcp add tomjwxf-scopeblind-gateway -- npx -y scopeblind-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "tomjwxf-scopeblind-gateway": {
      "command": "npx",
      "args": [
        "-y",
        "scopeblind-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package scopeblind-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.tomjwxf is GitHub-verified and matches the repo owner

03 · What Scopeblind MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.7.4 · 2026-07-03

Everything the scopeblind.com trial and docs pages describe now ships in the published npm package. · protect-mcp trial: guided ten-minute local trial (demo tool server, risky calls, policy pack, approval, signed…

v0.3.1 · 2026-03-24

Security gateway for MCP servers. Shadow-mode logs, per-tool policies, approval gates, optional Ed25519-signed receipts. · What's new in v0.3.1 · Per-tool policies: block, rate-limit, require approval, minimum trust…

v1.0.0 · 2026-02-17

ScopeBlind Gateway v1.0.0 · Cloudflare Worker reverse proxy with shadow mode. Deploy in 2 minutes. · What's included · Shadow mode - measures bot traffic without blocking anything · Enforce mode - toggle from your…

04 · Who maintains Scopeblind MCP

scopeblind-mcp is maintained by tomjwxf. It's the only MCP server we track from this author; the repo dates to Feb 2026.

05 · Facts

repository: github.com/tomjwxf/scopeblind-gateway
category: security - ranked #86 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 1 release in the last 90 days (latest 2026-07-03)
registry: io.github.tomjwxf/scopeblind-mcp (active, first published 2026-03-09 · 2 versions)
packages: npm:scopeblind-mcp

06 · Scopeblind MCP FAQ

What is Scopeblind MCP?

Security gateway for MCP servers. Shadow-mode logs by default, per-tool policies, optional local Ed25519 receipts, and verification-friendly audit output.

Is Scopeblind MCP still maintained?

Yes - as of 2026-08-25, its last commit was 2026-07-03 and it shipped 1 release in the last 90 days. We re-verify nightly.

How do I install Scopeblind MCP?

Run `npx -y scopeblind-mcp`. You can also paste the ready-made client config above.

Does Scopeblind MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Scopeblind MCP

Alternatives to Scopeblind MCP

Maintained security servers if Scopeblind MCP isn't the fit.

Pairs well with

Servers that cover what Scopeblind MCP doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Trestle · Trackly CLI · Agent Abilities for MCP · Contrast API · Siteaudit MCP

More TypeScript MCP servers · Skills Board · TONNode - TON blockchain access · Claude Code Conversation Search MCP · Hypertool MCP · Adr Analysis Server · see all