MCP Armor

Drop-in Rust sidecar for MCP servers

Scans tool calls for prompt injection, validates Ed25519 manifest signatures, blocks marketplace-poisoning vectors. Under 5ms p99 overhead.