GSEP-MCP — AI Agent Security via Model Context Protocol

The only MCP server that protects your AI agent instead of just extending it.

"me encanta saber que no borrará nada de mi pc" — First GSEP user, unprompted

Website · GSEP Core · npm · Discord

OTHER MCP SERVERS          GSEP-MCP
┌──────────────────┐       ┌──────────────────────────────┐
│  Give agent      │       │  Protect agent from          │
│  new tools       │  vs   │  prompt injection             │
│                  │       │  Block destructive actions    │
│  More features   │       │  Detect infected responses    │
│                  │       │  Self-evolving prompts        │
└──────────────────┘       └──────────────────────────────┘

{
  "mcpServers": {
    "gsep": {
      "command": "npx",
      "args": ["-y", "@gsep/mcp"],
      "env": {
        "ANTHROPIC_API_KEY": "sk-ant-..."
      }
    }
  }
}

{
  "mcpServers": {
    "gsep": {
      "command": "npx",
      "args": ["-y", "@gsep/mcp"],
      "env": {
        "ANTHROPIC_API_KEY": "sk-ant-..."
      }
    }
  }
}

{
  "mcpServers": {
    "gsep": {
      "command": "npx",
      "args": ["-y", "@gsep/mcp"],
      "env": {
        "ANTHROPIC_API_KEY": "sk-ant-..."
      }
    }
  }
}

{
  "mcpServers": {
    "gsep": {
      "command": "npx",
      "args": ["-y", "@gsep/mcp"],
      "env": {
        "ANTHROPIC_API_KEY": "sk-ant-...",
        "GSEP_PRESET": "full"
      }
    }
  }
}

{
  "mcpServers": {
    "gsep": {
      "command": "npx",
      "args": ["-y", "@gsep/mcp"],
      "env": {
        "OLLAMA_HOST": "http://localhost:11434",
        "GSEP_PRESET": "full"
      }
    }
  }
}

ANTHROPIC_API_KEY=sk-ant-... npx @gsep/mcp --http
# MCP endpoint:  http://localhost:3100/mcp
# OpenAI gateway: http://localhost:3100/v1/chat/completions
# Health check:  http://localhost:3100/health

import OpenAI from 'openai';

const client = new OpenAI({
  apiKey: process.env.GSEP_GATEWAY_KEY,
  baseURL: 'http://localhost:3100/v1',
});

const completion = await client.chat.completions.create({
  model: 'gpt-4o-mini',
  messages: [{ role: 'user', content: 'Refactor this repo safely.' }],
});

pip install mcp httpx

# gsep_client.py
import asyncio
from mcp.client.streamable_http import streamablehttp_client
from mcp import ClientSession

GSEP_URL = "http://localhost:3100/mcp"

async def gsep_chat(genome_id: str, message: str, user_id: str = "user") -> dict:
    async with streamablehttp_client(GSEP_URL) as (read, write, _):
        async with ClientSession(read, write) as session:
            await session.initialize()
            result = await session.call_tool("gsep_chat", {
                "genome_id": genome_id,
                "message": message,
                "user_id": user_id,
            })
            return result

async def gsep_scan_input(content: str) -> dict:
    async with streamablehttp_client(GSEP_URL) as (read, write, _):
        async with ClientSession(read, write) as session:
            await session.initialize()
            result = await session.call_tool("gsep_scan_input", {
                "content": content,
                "source": "user",
            })
            return result

# tasks.py
from celery import shared_task
import asyncio
from .gsep_client import gsep_chat, gsep_scan_input

@shared_task
def process_message(genome_id: str, message: str, user_id: str):
    scan = asyncio.run(gsep_scan_input(message))
    if scan.get("blocked"):
        return {"blocked": True, "reason": scan.get("detections")}
    return asyncio.run(gsep_chat(genome_id, message, user_id))

npm install @modelcontextprotocol/sdk

import { Client } from '@modelcontextprotocol/sdk/client/index.js';
import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';

const client = new Client({ name: 'my-backend', version: '1.0.0' });
const transport = new StreamableHTTPClientTransport(new URL('http://localhost:3100/mcp'));

await client.connect(transport);

const result = await client.callTool('gsep_chat', {
  genome_id: 'my-agent',
  message: userMessage,
  user_id: userId,
});

console.log(result);

ANTHROPIC_API_KEY=sk-ant-...
GSEP_PRESET=full
GSEP_HTTP_HOST=0.0.0.0
GSEP_HTTP_PORT=$PORT

GSEP_URL = "http://gsep-mcp.railway.internal:$PORT/mcp"

# Step 1 — Initialize (once per session)
POST /mcp
Content-Type: application/json

{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"my-client","version":"1.0.0"}}}

# Response includes header: mcp-session-id: <uuid>

# Step 2 — Call any tool (reuse session ID)
POST /mcp
Content-Type: application/json
mcp-session-id: <uuid from step 1>

{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"gsep_chat","arguments":{"genome_id":"my-agent","message":"Hello","user_id":"user-1"}}}