Event Hooks

protect-mcp

Runs a guard script before Task tool calls to enforce workflow policies, then logs tool results via a tracker script. Executes bash commands.

Bash

automation

2 events · 2 hooks

Source

Where this hook configuration is defined

Defined in hooks/hooks.json

Configuration

Event handlers and matchers — expand Raw Configuration for the full JSON

PreToolUse

Matcher: .*

Hooks:

command

npx [email protected] evaluate --policy "${PROTECT_MCP_POLICY:-./protect.cedar}" --tool "$TOOL_NAME" --input "$TOOL_INPUT" --fail-on-missing-policy false

PostToolUse

Matcher: .*

Hooks:

command

npx [email protected] sign --tool "$TOOL_NAME" --input "$TOOL_INPUT" --output "$TOOL_OUTPUT" --receipts "${PROTECT_MCP_RECEIPTS:-./receipts/}" --key "${PROTECT_MCP_KEY:-./protect-mcp.key}"

Stats

LanguagePython

Parent stars0

MaintenanceGood

Last CommitMay 29, 2026

Actions

View Source View Plugin View on GitHub View README

protect-mcp

Source

Configuration

PreToolUse

PostToolUse

protect-mcp

Source

Configuration

PreToolUse

PostToolUse

Reused across plugins

Similar Hooks

Reused across plugins

Similar Hooks