Skip to content
Agentmart
Submit a tool

Gsep MCP

AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.

Connector by gsepcore · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/gsepcore-gsep-mcp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
4 read · 1 write · 0 delete · 5 not yet classified
Secrets
2 (API keys, tokens or passwords)
Install scripts
Not scanned yet
Runs as
Node.js package

Tools by what they do 10

Read from the source code; the running server may list different tools.

Read 4 · Look things up without changing anything.

  • gsep_get_status
  • gsep_scan_actions
  • gsep_scan_input
  • gsep_scan_output

Write 1 · Create, change, send or run things.

  • gsep_record_feedback

Not yet classified 5 · We could not tell from the name and description.

  • gsep_after_llm
  • gsep_after_tool
  • gsep_before_llm
  • gsep_before_tool
  • gsep_chat

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • ANTHROPIC_API_KEY
  • OPENAI_API_KEY

Other settings (environment variables or headers).

  • GSEP_PRESET
  • OLLAMA_HOST

Files it touches

  • Any path the agent passes to its tools

Tools (10)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • gsep_after_llm

    Middleware hook to run after an external LLM responds. Runs C4 behavioral immune checks, records fitness, and returns safe_response before content is shown to users or tools.

  • gsep_after_tool

    Middleware hook to run after a tool returns external content and before that content is fed back into an agent/LLM. Scans for prompt injection and dangerous action instructions.

  • gsep_before_llm

    Middleware hook to run before any agent calls an LLM. Returns enhanced_prompt, sanitized_message, and C3/security status. Use this when GSEP-MCP protects an existing external agent rather than owning the LLM call.

  • gsep_before_tool

    Middleware hook to run before an agent executes a tool, shell command, database query, filesystem action, or API call. Uses C5 Action Firewall to block destructive actions before execution.

  • gsep_chat

    Send a message through the full GSEP pipeline. Runs C3 prompt injection scan, enhanced LLM call with evolved genes, C4 behavioral immune check, C5 action firewall, fitness tracking, and autonomous evolution. Returns the protected response.

  • gsep_get_status

    Get genome health, fitness scores, drift status, evolution generation, and security stats. Omit genome_id to list all active genomes.

  • gsep_record_feedback

    Record user satisfaction feedback for a genome. Positive signals reinforce current gene configuration. Negative signals trigger evolution on the next cycle.

  • gsep_scan_actions

    Scan LLM response for dangerous or destructive actions with C5 Action Firewall (80+ patterns). Classifies actions as safe/caution/destructive/critical. Permanently blocks rm -rf, DROP DATABASE, disk wipes, etc.

  • gsep_scan_input

    Scan user input with C3 Content Firewall (53 patterns). Detects prompt injection, role hijacking, data exfiltration attempts, encoding evasion, and more. Use this before sending any external content to your LLM.

  • gsep_scan_output

    Scan LLM output with C4 Behavioral Immune System (6 checks). Detects if the response was infected by Indirect Prompt Injection — system prompt leakage, role confusion, data exfiltration patterns, and more.

Signals

Stars
0
Forks
0
Open issues
0
Weekly downloads
19
Last commit
May 24, 2026 (5 months ago)
Last release
May 11, 2026 (5 months ago)
Last package publish
May 11, 2026 (5 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name
io.github.gsepcore/gsep-mcp
Version
1.0.0
Auth
API key
Packages
npm @gsep/mcp
License
MIT
Repository
github.com/gsepcore/gsep-mcp
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
Official MCP Registrygithub-graphql
Cite this page

Gsep MCP. Agent Mart. https://agentmart.dev/connectors/gsepcore-gsep-mcp (last updated 2026-10-24)