经 AI Skill Hub 精选评估,MCP工具 获评「强烈推荐」。这款MCP工具在功能完整性、社区活跃度和易用性方面表现出色,AI 评分 8.0 分,适合有一定技术背景的用户使用。
MCP工具 是一款遵循 MCP(Model Context Protocol)标准协议的 AI 工具扩展。通过 MCP 协议,它可以让 Claude、Cursor 等主流 AI 客户端直接访问和操作外部工具、数据源和服务,实现 AI 能力的无缝扩展。无论是文件操作、数据库查询还是 API 调用,都可以通过自然语言在 AI 对话中直接触发,极大提升生产效率。
MCP工具 是一款遵循 MCP(Model Context Protocol)标准协议的 AI 工具扩展。通过 MCP 协议,它可以让 Claude、Cursor 等主流 AI 客户端直接访问和操作外部工具、数据源和服务,实现 AI 能力的无缝扩展。无论是文件操作、数据库查询还是 API 调用,都可以通过自然语言在 AI 对话中直接触发,极大提升生产效率。
# 方式一:通过 Claude Code CLI 一键安装
claude skill install https://github.com/Rul1an/assay
# 方式二:手动配置 claude_desktop_config.json
{
"mcpServers": {
"mcp--": {
"command": "npx",
"args": ["-y", "assay"]
}
}
}
# 配置文件位置
# macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
# Windows: %APPDATA%/Claude/claude_desktop_config.json
# 安装后在 Claude 对话中直接使用 # 示例: 用户: 请帮我用 MCP工具 执行以下任务... Claude: [自动调用 MCP工具 MCP 工具处理请求] # 查看可用工具列表 # 在 Claude 中输入:"列出所有可用的 MCP 工具"
// claude_desktop_config.json 配置示例
{
"mcpServers": {
"mcp__": {
"command": "npx",
"args": ["-y", "assay"],
"env": {
// "API_KEY": "your-api-key-here"
}
}
}
}
// 保存后重启 Claude Desktop 生效
<p align="center"> <h1 align="center">Assay</h1> <p align="center"> <strong>Policy-as-code for MCP agents: enforce what a tool call can do, prove what it did, and stay honest about what you can't.</strong><br /> <span>A deterministic, fail-closed policy gate for MCP tool calls, with real kernel-level (eBPF/LSM) enforcement on Linux and offline-verifiable evidence. CI-native, no backend, bounded by design.</span> </p> <p align="center"> <a href="https://crates.io/crates/assay-cli"><img src="https://img.shields.io/crates/v/assay-cli.svg" alt="Crates.io"></a> <a href="https://github.com/Rul1an/assay/actions/workflows/ci.yml"><img src="https://github.com/Rul1an/assay/actions/workflows/ci.yml/badge.svg" alt="CI"></a> <a href="https://github.com/Rul1an/assay/blob/main/LICENSE"><img src="https://img.shields.io/crates/l/assay-core.svg" alt="License"></a> </p> <p align="center"> <a href="#try-it-in-30-seconds">Quickstart</a> · <a href="#enforce-prove-stay-honest">How it works</a> · <a href="#see-it-work">See it work</a> · <a href="examples/mcp-quickstart/">MCP example</a> · <a href="docs/guides/github-action.md">CI guide</a> · <a href="docs/security/OWASP-MCP-TOP10-MAPPING.md">OWASP MCP Top 10</a> · <a href="https://github.com/Rul1an/assay/discussions">Discussions</a> </p> </p>
---
In 2026 agents got real tool access through MCP, and the attacks came with it: tool poisoning, rug pulls, confused-deputy OAuth, dozens of CVEs in the first months alone. Most tools scan a server or filter a prompt. Assay sits at the tool-call boundary and does three things, in order.
cargo install assay-cli
CI: GitHub Action. Python SDK: pip install assay-it.
No hosted backend. No API keys for core flows. Deterministic: same input, same decision.
v3.21.0 runtime enforcement (Linux):assay sandbox --enforce-netenforces a TCP-connect port allowlist with Landlock, a second kernel route beside the connect4/eBPF egress path, denying any TCP connect to a non-allowlisted port. It records the outcome in a separateassay.enforcement_health.v1artifact, and--probe-enforcementadds a per-run real-block check (a denied connect blocked withEACCES, the harness listener never reached). Enforcement is opt-in and fail-closed: a network policy it cannot express as an explicit port allowlist is refused rather than partially applied, and a requested health artifact that cannot be written is an error, never a silent absence. It is bounded by design and makes no IP/CIDR, hostname, UDP, or QUIC claim. See CHANGELOG.md for the full release notes.
<details> <summary>Evidence levels and non-goals</summary>
Trust claims use explicit epistemology, not a single “safety score”:
| Level | Meaning |
|---|---|
verified | Backed by direct evidence or offline verification in the bundle/path |
self_reported | Emitted by the system without stronger independent corroboration |
inferred | Derived from bounded, documented rules |
absent | No trustworthy evidence supports the claim |
Assay does not ship a primary aggregate trust score or a safe/unsafe badge as the main output. See ADR-033.
</details>
name: Assay Gate on: [push, pull_request] permissions: contents: read security-events: write jobs: assay: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - uses: Rul1an/assay-action@v2 ```
PRs that violate policy get blocked; SARIF can surface in the Security tab.
高质量的MCP工具,具有良好的安全性和可扩展性
AI Skill Hub 为第三方内容聚合平台,本页面信息基于公开数据整理,不对工具功能和质量作任何法律背书。
建议在沙箱或测试环境中充分验证后,再部署至生产环境,并做好必要的安全评估。
✅ MIT 协议 — 最宽松的开源协议之一,可自由商用、修改、分发,仅需保留版权声明。
AI Skill Hub 点评:MCP工具 的核心功能完整,质量优秀。对于Claude Desktop / Claude Code 用户来说,这是一个值得纳入个人工具库的选择。建议先在非生产环境试用,再逐步推广。
| 原始名称 | assay |
| 原始描述 | 开源MCP工具:CI-native evidence compiler for agent systems: MCP policy enforcement, evidence 。⭐6 · Rust |
| Topics | mcpagent-securityai-agentsai-securitycicyclonedxrust |
| GitHub | https://github.com/Rul1an/assay |
| License | MIT |
| 语言 | Rust |
收录时间:2026-06-13 · 更新时间:2026-06-13 · License:MIT · AI Skill Hub 不对第三方内容的准确性作法律背书。
选择 Agent 类型,复制安装指令后粘贴到对应客户端