Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Comments

Close side panel

Tested tool poisoining, tested standard MCP wasn't impacted as well with claude integration #2

Merged
mbhatt1 merged 4 commits intomainvineethsai/python-sdk:mainfrom
mainvineethsai/python-sdk-etdi:mainCopy head branch name to clipboard
May 29, 2025
Merged

Tested tool poisoining, tested standard MCP wasn't impacted as well with claude integration #2
mbhatt1 merged 4 commits intomainvineethsai/python-sdk:mainfrom
mainvineethsai/python-sdk-etdi:mainCopy head branch name to clipboard

Conversation

@vineethsai
Copy link
Owner

🔒 Security & Secret Management

  • Removed all hardcoded Auth0 credentials from codebase
  • Replaced with secure os.getenv() environment variables
  • Added .env.example template for safe setup

🛡️ Tool Poisoning Prevention Demo

  • Complete demonstration with legitimate vs malicious servers
  • Real-time ETDI security analysis (100/100 vs 0/100 scoring)
  • FastMCP servers with actual MCP protocol communication
  • OAuth authentication with Auth0 integration

📚 Enhanced Documentation

  • Completely rewrote examples/README.md with step-by-step ETDI setup
  • Added comprehensive tool poisoning demo documentation
  • Included Auth0 configuration guide and troubleshooting
  • Created progressive learning path (beginner → expert)

🛠️ Infrastructure

  • Added requirements.txt with all necessary dependencies
  • Created ETDI attack prevention client with detailed logging
  • Built real server demo orchestrator with educational explanations

📁 Files Added:

  • examples/etdi/tool_poisoning_demo/ - Complete demo directory
  • examples/etdi/tool_poisoning_demo/legitimate_etdi_server.py - ETDI-protected server
  • examples/etdi/tool_poisoning_demo/malicious_server.py - Attack simulation
  • examples/etdi/tool_poisoning_demo/etdi_attack_prevention_client.py - ETDI client
  • examples/etdi/tool_poisoning_demo/run_real_server_demo.py - Demo orchestrator
  • examples/etdi/tool_poisoning_demo/requirements.txt - Dependencies

📝 Files Modified:

  • examples/README.md - Complete rewrite with ETDI focus
  • examples/etdi/oauth_providers.py - Secret redaction + env vars
  • examples/etdi/run_e2e_demo.py - Secret redaction + env vars

- Replace with secure environment variables using os.getenv()
- Add .env.example template for easy setup
- Implement automatic secret redaction tooling

- Create comprehensive tool poisoning attack demonstration
- Implement legitimate ETDI-protected server with OAuth authentication
- Add malicious server simulation for educational purposes
- Provide real-time security analysis and threat blocking

- Add comprehensive tool poisoning demo documentation
- Include Auth0 setup guide and troubleshooting sections

- Add requirements.txt with all necessary dependencies
- Create setup verification and testing scripts
- Implement automatic environment configuration
- Add comprehensive error handling and user guidance

- examples/README.md: Complete rewrite with ETDI focus
- examples/etdi/oauth_providers.py: Secret redaction + env vars
- examples/etdi/run_e2e_demo.py: Secret redaction + env vars
- src/mcp/etdi/server/tool_provider.py: Enhanced functionality

- examples/etdi/.env.example: Environment variable template
- examples/etdi/tool_poisoning_demo/: Complete demo directory
- examples/etdi/tool_poisoning_demo/requirements.txt: Dependencies
- examples/etdi/tool_poisoning_demo/README.md: Setup documentation
- examples/etdi/legitimate_etdi_server.py: ETDI-protected server
- examples/etdi/tool_poisoning_demo/malicious_server.py: Attack simulation
- examples/etdi/tool_poisoning_demo/etdi_attack_prevention_client.py: ETDI client
- examples/etdi/tool_poisoning_demo/run_real_server_demo.py: Demo orchestrator
@mbhatt1
Copy link
Collaborator

mbhatt1 commented May 29, 2025

Noice

@mbhatt1 mbhatt1 merged commit 4483542 into vineethsai:main May 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.