efij/secure-claude-code
Security guardrails for Claude Code, MCP tools, and Claude cowork workflows. Local-first modular YARA-style guard packs for secrets, exfiltration, prompt injection, MCP abuse, and risky agent actions.
Platform-specific configuration:
{
"mcpServers": {
"secure-claude-code": {
"command": "npx",
"args": [
"-y",
"secure-claude-code"
]
}
}
}Add the config above to .claude/settings.json under the mcpServers key.
> Local-first security for Claude Code. Protect shell, git, MCP, secrets, and risky agent actions without dragging in heavy enterprise tooling.
Secure Claude Code adds a practical security layer around Claude Code to reduce prompt injection fallout, secret leakage, unsafe command execution, dangerous git operations, and risky MCP or tool configurations.
It is built for solo builders, startups, security-minded teams, and larger orgs that want safer defaults around AI coding workflows.
<p align="left"> </p>
Claude Code is useful because it can read files, run shell commands, use git, and work with MCP tools.
That is also exactly why it needs guardrails.
Secure Claude Code helps reduce real-world risk around:
It is local-first, practical, and built for real developer environments.
Secure Claude Code helps you:
It works well on top
Loading reviews...