--- title: "Trail of Bits mcp-context-protector: MCP | Agent MCP Directory" description: "Trail of Bits mcp-context-protector: security scanner. 1 product, 7 dated facts, prices and two checks, each sourced, read 5 November 2026." canonical: https://agentmcpdirectory.com/vendors/trailofbits-context-protector site: "Agent MCP Directory" last_updated: 2026-11-05 section: "Vendors" --- # Trail of Bits mcp-context-protector: MCP | Agent MCP Directory > Trail of Bits mcp-context-protector: security scanner. 1 product, 7 dated facts, prices and two checks, each sourced, read 5 November 2026. Source: https://agentmcpdirectory.com/vendors/trailofbits-context-protector Site: Agent MCP Directory Last reviewed: 2026-11-05 # Trail of Bits mcp-context-protector: MCP vendor profile mcp-context-protector from Trail of Bits wraps MCP servers to pin their configuration on first use, quarantine tool responses flagged by guardrails and strip ANSI control characters, as documented by the vendor. Trail of Bits releases mcp-context-protector under Apache-2.0, and GitHub counted 228 stars for it on 5 Nov 2026 (github.com, observed 5 November 2026). ## At a glance | Type | Security scanners | | --- | --- | | Operator | Trail of Bits | | Home | github.com | | Price | open source, Apache-2.0 | | Read | 5 November 2026 | ## What it does for this layer Trail of Bits calls mcp-context-protector an "MCP security wrapper" for the risks of running untrusted MCP servers, including line jumping and unexpected configuration changes ([github.com](https://github.com/trailofbits/mcp-context-protector)). Clients run their MCP servers through mcp-context-protector, and the README shows a Claude Desktop configuration that enables tool configuration pinning ([github.com](https://github.com/trailofbits/mcp-context-protector)). The README warns that some clients, including Cursor at the time of writing, join stdio server arguments into one space-delimited string, and adds a --command-args option for that case ([github.com](https://github.com/trailofbits/mcp-context-protector)). mcp-context-protector pins server configurations with trust-on-first-use, so a changed tool configuration is caught before the client sees it ([github.com](https://github.com/trailofbits/mcp-context-protector)). mcp-context-protector scans tool responses with guardrails and quarantines flagged responses ([github.com](https://github.com/trailofbits/mcp-context-protector)). mcp-context-protector sanitises ANSI control characters in server output ([github.com](https://github.com/trailofbits/mcp-context-protector)). ## Products and plans | Product | What it does | Price | | --- | --- | --- | | mcp-context-protector | Open-source wrapper that pins MCP server configs and screens responses. | open source, Apache-2.0; from 0 USD (source, as of 5 November 2026) | ## Checks on its own domain | Check | Domain | Result | Scanned | Method | | --- | --- | --- | --- | --- | | Ora cached score | trailofbits.com | 47 of 100, grade D | 25 August 2026 | how it was taken | | Cloudflare agent-readiness scan | trailofbits.com | 20 of 100, L1 Basic Web Presence; 3 of 15 counted checks passed | 5 November 2026 | how it was taken | ## What it does not do - mcp-context-protector does not scan a whole machine for agent configs; it wraps the servers a client is configured to run through it. - Trail of Bits does not sell mcp-context-protector as a hosted service. ## Related on this site Type - [Security scanners](https://agentmcpdirectory.com/vendors/by-type/security-scanner/) Section - [All vendors](https://agentmcpdirectory.com/vendors/) Edition 4 November 2026 Method [How rows are verified](https://agentmcpdirectory.com/method/) Data [CSV and JSON](https://agentmcpdirectory.com/data/) Markdown [This page as markdown](https://agentmcpdirectory.com/vendors/trailofbits-context-protector/index.md) ## Sources - [GitHub - trailofbits/mcp-context-protector](https://github.com/trailofbits/mcp-context-protector), read 5 November 2026 Last reviewed 5 November 2026