Self-hosted alternatives to protect-mcp-setup
5 self-hosted AI Skills apps to use instead, best rated first.
Top picks
- C

claude-to-deerflow
Getclaude-to-deerflow is an agent skill that lets an assistant send messages and questions to a running DeerFlow instance through its HTTP API. DeerFlow is an AI agent platform built on LangGraph that orchestrates sub-agents for research, code
Self-hosted
- O

open-notebook
Getopen-notebook is an agent skill for organising research with Open Notebook, a self-hosted alternative to NotebookLM. It arranges sources, notes and AI conversations into research notebooks. Sources can be PDFs, web pages, audio, video and O
Self-hosted
- R

Reactive Resume
GetReactive Resume is a free and open-source resume builder for writing resumes and cover letters, checking the work, and tracking job applications. You create a free account, import an existing resume or start from scratch, and see the finish
Open sourceSelf-hosted
- S

self-hosted-funnel-launch
GetSelf-hosted funnel launch is an agent skill that takes a funnel from an empty install to published on infrastructure you control, using the Autonnel funnel builder, which is licensed Apache-2.0. The result covers a landing page, checkout, a
Self-hosted
- G

get-convex/convex-backend
GetConvex is an open-source reactive database for web app developers. It combines a database, a place to write server functions in pure TypeScript, and client libraries that keep the app's data live, so screens update as the data changes. Beca
Self-hosted
About protect-mcp-setup

protect-mcp-setup
Configure Cedar policy enforcement and Ed25519 signed receipts
protect-mcp-setup is an agent skill from the wshobson/agents collection for configuring policy enforcement and signed audit receipts for Claude Code tool calls. Claude Code can run powerful tools such as Bash, Edit, Write and WebFetch, and by default there is no record of what was run and no check against a policy beforehand. The skill sets up the protect-mcp approach to close those gaps. Each tool call is first evaluated against a Cedar policy, the open authorization engine from AWS, and a Cedar deny is authoritative, so a blocked call does not run. Each call that runs produces an Ed25519-signed receipt that records the name of the tool that ran, signed with your key, and the receipts can be checked offline with the verification tool published on npm, without a server or an account. The skill is for projects that need cryptographic audit trails of agent actions and a policy that is enforced before execution rather than reviewed afterwards. Setup involves choosing the policies and managing the signing key, and the signing key should be kept secret and backed up, because receipts can only be verified against the key that signed them. The skill is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 5.8K installs and passing results from three security audits at the time of the scan.
- Price
- Free
- Made by
- wshobson
- Category
- AI Skills
- Website
- github.com/wshobson/agents/protect-mcp-setup