{"slug": "introducing-ayeixa-mcp-guardian-capability-fencing-parameter-sanitization-for", "title": "Introducing Ayeixa MCP Guardian: Capability Fencing & Parameter Sanitization for MCP", "summary": "Ayeixa has released MCP Guardian, an open-source middleware that adds capability fencing and parameter sanitization to Model Context Protocol servers, blocking directory traversal and dangerous shell commands. The tool includes RBAC, an audit logger with SHA-256 hash chaining, and a sandboxed execution wrapper, verified by six passing unit tests.", "body_md": "#\nIntroducing Ayeixa MCP Guardian: Capability Fencing & Parameter Sanitization for MCP\n\nModel Context Protocol (MCP) empowers language models to interact directly with databases, filesystems, and CLI utilities. However, exposing tool APIs creates security vulnerabilities: unauthorized directory traversal (`../../etc/passwd`\n\n), destructive shell commands (`rm -rf`\n\n), and untracked actions.\n\n**Ayeixa MCP Guardian** (`@ayeixa/mcp-guardian`\n\n) is a runtime capability fence and parameter sanitization middleware for Model Context Protocol servers and client tool invocations.\n\n##\n1. Core Architecture\n\nMCP Guardian operates as an interceptor middleware:\n\n-\n**ToolPermissionFence**: Enforces granular Role-Based Access Control (RBAC) and explicit tool allowlists/denylists.\n-\n**InvocationSanitizer**: Sanitizes parameter arguments, blocking directory traversal patterns (`../`\n\n) and dangerous system commands (`sudo`\n\n, `rm -rf`\n\n, `chmod 777`\n\n).\n-\n**RuntimeAuditLogger**: Records every invocation payload, argument set, and permission verdict into a tamper-evident SHA-256 cryptographic hash chain.\n-\n**GuardianSandbox**: Permission-gated execution wrapper evaluating authorization rules and logging audit records before dispatching to tool executors.\n\n##\n2. Implemented Capabilities & Test Verification\n\nVerified with hermetic unit tests:\n\n-\n**Permission Fencing**: RBAC and denied command enforcement (`tests/permission.test.ts`\n\n).\n-\n**Audit Ledger**: Cryptographic hash chain validation (`tests/audit.test.ts`\n\n).\n-\n**Execution Wrapper**: Permission-gated dispatch and error containment (`tests/sandbox.test.ts`\n\n).\n\nVerification: **6/6 hermetic unit tests passing** (0 failures).\n\n##\n3. Local Quick Start\n\n###\nUsage Example\n\n##\n4. Limitations & Contributing\n\n- Pre-release\n`v0.1.0-alpha`\n\n. Provides application-level permission gating and parameter sanitization.\n- Public npm publication is pending.\n- We encourage security developers and researchers to contribute. See open\n`good first issue`\n\ntags on GitHub.\n\nLicense: Apache-2.0", "url": "https://wpnews.pro/news/introducing-ayeixa-mcp-guardian-capability-fencing-parameter-sanitization-for", "canonical_source": "https://dev.to/alp_allovi_45214d2d8316a1/introducing-ayeixa-mcp-guardian-capability-fencing-parameter-sanitization-for-mcp-14dj", "published_at": "2026-08-17 19:55:48+00:00", "updated_at": "2026-08-17 20:13:49.249645+00:00", "lang": "en", "topics": ["ai-safety", "ai-tools", "developer-tools"], "entities": ["Ayeixa", "MCP Guardian", "Model Context Protocol", "GitHub"], "alternates": {"html": "https://wpnews.pro/news/introducing-ayeixa-mcp-guardian-capability-fencing-parameter-sanitization-for", "markdown": "https://wpnews.pro/news/introducing-ayeixa-mcp-guardian-capability-fencing-parameter-sanitization-for.md", "text": "https://wpnews.pro/news/introducing-ayeixa-mcp-guardian-capability-fencing-parameter-sanitization-for.txt", "jsonld": "https://wpnews.pro/news/introducing-ayeixa-mcp-guardian-capability-fencing-parameter-sanitization-for.jsonld"}}