basitalisandhu

basitalisandhu/claude-mcp-allow

Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule each, never a glob. Merges into settings files, prints a diff, and --check exits 1 when annotations drift. TypeScript CLI on npm.

6 good first / help-wanted issues · TypeScript · last activity Oct 4, 2026

0 stars 0 forks 0 watchers TypeScript MIT License
agent-security ai-agents ai-security claude-code cli developer-tools devsecops drift-detection hacktoberfest least-privilege llm-security mcp mcp-client model-context-protocol permissions security-tools tool-annotations typescript
View on GitHub
6 Open Issues Need Help Last updated: Oct 4, 2026

Open Issues Need Help

View All on GitHub
Skip servers matched by `deniedMcpServers` 9 days ago
help wanted good first issue
basitalisandhu/claude-mcp-allow
0

Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule each, never a glob. Merges into settings files, prints a diff, and --check exits 1 when annotations drift. TypeScript CLI on npm.

TypeScript
#agent-security#ai-agents#ai-security#claude-code#cli#developer-tools#devsecops#drift-detection#hacktoberfest#least-privilege#llm-security#mcp#mcp-client#model-context-protocol#permissions#security-tools#tool-annotations#typescript
Read `managed-mcp.json` servers 13 days ago
help wanted good first issue hacktoberfest
basitalisandhu/claude-mcp-allow
0

Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule each, never a glob. Merges into settings files, prints a diff, and --check exits 1 when annotations drift. TypeScript CLI on npm.

TypeScript
#agent-security#ai-agents#ai-security#claude-code#cli#developer-tools#devsecops#drift-detection#hacktoberfest#least-privilege#llm-security#mcp#mcp-client#model-context-protocol#permissions#security-tools#tool-annotations#typescript
Add a `--prune` flag for servers that no longer exist 20 days ago
help wanted good first issue hacktoberfest
basitalisandhu/claude-mcp-allow
0

Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule each, never a glob. Merges into settings files, prints a diff, and --check exits 1 when annotations drift. TypeScript CLI on npm.

TypeScript
#agent-security#ai-agents#ai-security#claude-code#cli#developer-tools#devsecops#drift-detection#hacktoberfest#least-privilege#llm-security#mcp#mcp-client#model-context-protocol#permissions#security-tools#tool-annotations#typescript
Support `headersHelper` for HTTP servers 21 days ago
help wanted good first issue hacktoberfest
basitalisandhu/claude-mcp-allow
0

Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule each, never a glob. Merges into settings files, prints a diff, and --check exits 1 when annotations drift. TypeScript CLI on npm.

TypeScript
#agent-security#ai-agents#ai-security#claude-code#cli#developer-tools#devsecops#drift-detection#hacktoberfest#least-privilege#llm-security#mcp#mcp-client#model-context-protocol#permissions#security-tools#tool-annotations#typescript
Report tools whose names contradict their annotations 21 days ago
help wanted good first issue hacktoberfest
basitalisandhu/claude-mcp-allow
0

Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule each, never a glob. Merges into settings files, prints a diff, and --check exits 1 when annotations drift. TypeScript CLI on npm.

TypeScript
#agent-security#ai-agents#ai-security#claude-code#cli#developer-tools#devsecops#drift-detection#hacktoberfest#least-privilege#llm-security#mcp#mcp-client#model-context-protocol#permissions#security-tools#tool-annotations#typescript
Add `--format json` for the report 21 days ago
help wanted good first issue hacktoberfest
basitalisandhu/claude-mcp-allow
0

Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule each, never a glob. Merges into settings files, prints a diff, and --check exits 1 when annotations drift. TypeScript CLI on npm.

TypeScript
#agent-security#ai-agents#ai-security#claude-code#cli#developer-tools#devsecops#drift-detection#hacktoberfest#least-privilege#llm-security#mcp#mcp-client#model-context-protocol#permissions#security-tools#tool-annotations#typescript