MCP-Dandan is an MCP security solution for agentic AI, primarily used to monitor and analyze MCP (Model Context Protocol) communications in real time, detecting and blocking malicious tool calls and security threats. It provides a convenient monitoring and management interface through a built-in Electron desktop UI.
Main capabilities include: real-time MCP traffic monitoring, which can intercept and analyze MCP communications; multi-engine threat detection, covering command injection detection, file system exposure detection, PII leakage detection (with support for custom rules), data exfiltration detection, and LLM-based tool poisoning detection. The tool poisoning detection engine identifies MCP tool misuse through semantic analysis, compares tool specifications with actual usage, provides an alignment score from 0 to 100 with a detailed breakdown, and automatically classifies severity as none, low, medium, or high. The system also has real-time threat blocking capability, which users can control through the interface.
How to use: After the application starts, the server will run at http://127.0.0.1:8282，Electron The desktop application will start automatically. The desktop UI provides a real-time dashboard, interactive tutorial, interception interface, settings panel, and chat panel for monitoring traffic, viewing threats, configuring detection engines, and interacting and viewing logs. To enable the tool poisoning engine, you need to enter MISTRAL_API_KEY and configure the detection settings.
Use cases: Suitable for developers and operations personnel who need to protect the security of communications between MCP servers and agents, enabling real-time discovery and blocking of risks such as command injection, unauthorized file system access, PII leakage, data exfiltration, and tool poisoning when agents call tools. The system supports Windows, macOS, and Linux across platforms.
Limitations: Tool poisoning detection depends on MISTRAL_API_KEY to be enabled; the specific limitations of other detection engines are not explained in the materials; detailed technical documentation requires reference to the MCP-Dandan Wiki.