intermcp 0.3.0

Ultra-fast, safe Model Context Protocol (MCP) engine and multiplexing hub in pure Rust, built for Interlayer Blockchain and open for all
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

use intermcp::taint::{SensitivityLabel, SinkCapability, TaintTracker};
use serde_json::json;

#[test]
fn test_taint_tracking_and_flow_enforcement() {
    let tracker = TaintTracker::new();

    // 1. Tagging items
    tracker.tag_item("user_prompt", SensitivityLabel::Public);
    tracker.tag_item("repo_code", SensitivityLabel::Internal);
    tracker.tag_item("aws_key", SensitivityLabel::Confidential);
    tracker.tag_item("web_search_snippet", SensitivityLabel::Untrusted);

    assert_eq!(tracker.get_label("user_prompt"), SensitivityLabel::Public);
    assert_eq!(
        tracker.get_label("web_search_snippet"),
        SensitivityLabel::Untrusted
    );

    // 2. Permitted flows
    assert!(tracker
        .check_flow(
            SensitivityLabel::Public,
            SinkCapability::PrivilegedExecution
        )
        .is_ok());
    assert!(tracker
        .check_flow(SensitivityLabel::Internal, SinkCapability::FileMutation)
        .is_ok());
    assert!(tracker
        .check_flow(
            SensitivityLabel::Untrusted,
            SinkCapability::ReadOnlyInspection
        )
        .is_ok());

    // 3. Prohibited flow: Untrusted data flowing to privileged shell execution
    let untrusted_flow = tracker.check_flow(
        SensitivityLabel::Untrusted,
        SinkCapability::PrivilegedExecution,
    );
    assert!(untrusted_flow.is_err());

    // 4. Prohibited flow: Confidential data egressing to external network
    let confidential_flow = tracker.check_flow(
        SensitivityLabel::Confidential,
        SinkCapability::NetworkEgress,
    );
    assert!(confidential_flow.is_err());

    // 5. JSON argument scanning
    let safe_args = json!({ "path": "src/main.rs" });
    assert!(tracker
        .scan_json_arguments(&safe_args, SinkCapability::PrivilegedExecution)
        .is_ok());

    let tainted_args = json!({
        "command": "deploy.sh",
        "_taint": "untrusted"
    });
    assert!(tracker
        .scan_json_arguments(&tainted_args, SinkCapability::PrivilegedExecution)
        .is_err());
    assert_eq!(tracker.total_violations(), 3);
}