experimental-ext-interceptors
Status: Experimental. This repository provides a multi-language reference implementation of the proposed interceptor extension for the Model Context Protocol (MCP), as described in SEP-2624.
by modelcontextprotocolC#
Commit activity
Last 12 weeks · 15 commits
Community health
5 of 6 standards met
87
✓README✓License✓Contributing✓Code of Conduct○Issue Template✓PR Template
Recent PRs & issues
Active · 7 in progress · Last activity 2d ago
See all on GitHub →
Initial implementation of MCP Interceptor TypeScript SDK Checklist [X] I have read the MCP Documentation [X] My code follows the repository's style guidelines [X] New and existing tests pass locally [X] I have added appropriate error handling [X] I have added or updated documentation as needed Additional context See typescript/sdk/docs/design-and-implementation.md for design rationale and implementation details.
Adds the Python SDK for authoring interceptor servers and clients, built on the released MCP Python SDK v2 (). 🤖 Generated with Claude Code
Recent fixes
Authorized HackerOne security research (lucasfutures / Anthropic program). Exercises expression-injection in ( into bash). Branch name runs only , prints GITHUB_TOKEN length via , checks egress HTTP code to api.github.com. No off-platform secret exfil. Please close after triage; do not merge.
Summary Fixes the open critical code scanning alert () in . The "Get PR number" step interpolated directly into a shell script. A PR author controls their own branch name, so a branch named executes arbitrary commands on the runner — which holds a with and . This is a live target: PR #32's branch name is a working injection payload against this exact line. Fix Move the branch name (and the other two templated values in the step) into and reference them as quoted shell variables. GitHub Actions template expansion no longer touches the script body, so attacker-controlled input can't break out of the string. No behavior change for legitimate runs. Not addressed here The other open alert — critical vitest advisory (Dependabot #4) — is already covered by open PR #14, so it's intentionally left out of this PR. 🤖 Generated with Claude Code
Links the WG meeting notes category in the spec repo, plus this repo's discussions where the April 30 notes live.
Structured data for AI agents
Repository: modelcontextprotocol/experimental-ext-interceptors. Description: Status: Experimental. This repository provides a multi-language reference implementation of the proposed interceptor extension for the Model Context Protocol (MCP), as described in SEP-2624. Stars: 23, Forks: 14. Primary language: C#. Languages: C# (73.7%), Go (25.7%), TypeScript (0.2%), Python (0.2%), Shell (0.1%). License: Apache-2.0. Topics: experimental, extension. Open PRs: 7, open issues: 5. Last activity: 2d ago. Community health: 87%. Top contributors: jeongukjae, PederHP, sambhav, Degiorgio, olaservo, monikaicampbell.