Bridgeguard Mcp

io.github.kota1026由 GitHub 账号 kota1026 发布v1.0.0更新于 Oct 24, 2026

BridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...

已验证STDIO仅桌面开发者工具安全与监控

概览

AI 生成的概览

一个本地 stdio MCP 服务器,据注册表描述为 AI 编程代理提供跨链桥安全审计工具。

可以做什么
按注册表描述,扫描跨链桥的安全问题,面向 AI 编程代理。未公布工具清单,具体操作没有文档说明。随附的 README 描述的是一个无关的后量子以太坊资产保护项目,无法说明该服务器的能力。
适用场景
仅当你希望 AI 编程代理执行跨链桥安全检查,并且能自行核实该软件包的实际行为时再考虑;现有资料过少且不一致,难以判断是否适用。
运行要求
以本地进程通过 stdio 运行,从 npm 包 bridgeguard-mcp 安装,需要 Node.js。未声明任何身份验证、环境变量或请求头。仅限桌面端,不能在网页中执行。
安装前请注意
注册表描述与 README 不一致:README 讲的是后量子以太坊协议,涉及已部署合约、质押、保证金和治理,而非跨链桥审计。没有工具、权限或数据处理方面的文档,也未提及外部审计,安装前请先审查该软件包。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Bridgeguard Mcp,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Quantum Shield

[License: MIT] [Rust] [Solidity] [Next.js]

Post-quantum asset protection protocol for Ethereum using NIST-standardized cryptography

What is Quantum Shield?

Quantum Shield protects smart contract assets against quantum computing threats using NIST FIPS 204 (ML-DSA/Dilithium) and FIPS 205 (SLH-DSA/SPHINCS+) dual post-quantum signatures, combined with a decentralized Prover Pool, VRF-based selection, and time-locked custody.

Key Features

  • Dual PQC Signatures — ML-DSA-65 + SLH-DSA for defense-in-depth
  • Prover Pool — Decentralized verification with stake-weighted selection via VRF
  • Time-Locked Custody — 24h normal unlock, 7-day emergency path with bond
  • Observer Network — Independent challenge system with quadratic slashing
  • On-Chain Governance — veQS token voting, security council, insurance fund
  • 11 Sub-Applications — Consumer, Prover, Observer, Explorer, Enterprise, Governance, Admin

Architecture

┌─────────────────────────────────────────────────────────────────┐│  Frontend (Next.js 15)         11 apps, 136 routes, ja/en i18n │├─────────────────────────────────────────────────────────────────┤│  Backend API (Rust/Axum)       REST API, SIWE auth, Auto-Claim │├──────────────────┬──────────────────────────────────────────────┤│  L1: Sepolia     │  L3: Arbitrum Sepolia                       ││  • Vault         │  • CoreLayer    • Governor                  ││  • ProverRegistry│  • veQS         • RewardRouter              ││  • SPHINCS+ Vfy  │  • QSToken      • InsuranceFund             │└──────────────────┴──────────────────────────────────────────────┘

9 Core Sequences

#FlowPath
1Consumer LockFrontend → API → DB → L1 Vault
2Normal Unlock24h timelock → Prover verification → L1 claim
3Emergency UnlockBond deposit → 7-day lock → Emergency path
4Prover RegistrationStake → VRF selection → Proof generation
5Observer ChallengeMonitor → Challenge → VRF arbitration
6SlashingQuadratic penalty → L1 ProverRegistry
7GovernanceveQS voting → Proposal execution on L3
8Emergency PauseSecurity council → L1 pause
9Token HubStake QS → veQS → Rewards

Tech Stack

LayerTechnology
FrontendNext.js 15, TypeScript, Tailwind CSS, Wagmi, RainbowKit
BackendRust, Axum, PostgreSQL, Redis, RabbitMQ
ContractsSolidity 0.8.24 (Foundry), deployed to Sepolia + Arbitrum Sepolia
CryptographyNIST FIPS 204 (ML-DSA-65), FIPS 205 (SLH-DSA), SHA3-256
SDKWASM (Rust → wasm-pack), npm-publishable
TestingPlaywright (E2E), Vitest, cargo test, Foundry forge test

Deployed Contracts

L1: Ethereum Sepolia

ContractAddress
Vault0x07012aeF87C6E423c32F2f8eaF81762f63337260
ProverRegistry0x08e1fc1A0d614bc132B48950760c7A291cCB8946
SPHINCS+ Verifier0xD090b5A627d9bd6D96a8b5f6F504ebCa79980103

L3: Arbitrum Sepolia (12 contracts)

ContractAddress
CoreLayer0xb04F4DFe093dC80420117EDC8300f5EB6F6EDBf0
veQS0xE72dFa97C9E452dC0b8E6aa026c910D21B20fCAE
Governor0xe93b8129DC3dBD48E5d78C5A4C156DD1BFa8D65B
QSToken0xBD66beBE19E664dF143da54808d746192e4f2ee2

All L3 contracts verified on Sourcify.

Quick Start

Prerequisites

  • Docker & Docker Compose
  • Rust 1.75+ with cargo
  • Node.js 20+ with pnpm
  • Foundry (forge, anvil)

Development Setup

bash
# 1. Start infrastructuredocker compose up -d postgres redis rabbitmq l3-node minio minio-init
# 2. Run database migrationscd src/api/apiDATABASE_URL="postgresql://quantum:quantum_dev@localhost:5432/quantum_shield" sqlx migrate run
# 3. Start backend API (port 8080)cargo run --bin api-server
# 4. Start frontend (port 3000)cd src/frontend/webpnpm installpnpm dev

Verify

bash
curl http://localhost:8080/v1/health# {"status":"healthy"}

Project Structure

quantum-shield/├── src/│   ├── api/api/              # Rust/Axum backend│   │   ├── src/routes/       # API route handlers│   │   ├── src/services/     # Business logic│   │   ├── migrations/       # PostgreSQL migrations (17 files)│   │   └── config/           # YAML configuration│   ├── frontend/web/         # Next.js 15 frontend│   │   ├── src/app/          # App Router pages (11 apps)│   │   ├── src/components/   # 300+ React components│   │   ├── src/hooks/        # React Query hooks per app│   │   └── locales/          # ja/en translations│   ├── l1/contracts/         # L1 Solidity contracts (Foundry)│   ├── l3/                   # L3 governance contracts│   └── frontend/sdk/wasm/    # WASM SDK (Dilithium + SPHINCS+)├── docs/│   ├── core/SEQUENCES.md     # 9 core sequence specifications│   ├── ACTUAL_STATE.md       # Current implementation state│   └── pitch/                # Pitch deck, grant applications├── docker-compose.yml        # Development infrastructure└── .github/workflows/        # CI/CD pipelines

Testing

bash
# Backendcd src/api/api && cargo test
# Frontend E2Ecd src/frontend/web && npx playwright test
# Smart Contractscd src/l1/contracts && forge test

Test Coverage: 137 E2E tests passing, 107 integration tests, 0 failures.

Security

  • Cryptography: NIST FIPS 204 ML-DSA-65 + FIPS 205 SLH-DSA (post-quantum)
  • Hashing: SHA3-256 (no keccak256 in application layer)
  • Authentication: SIWE (Sign-In with Ethereum) + JWT
  • Time Locks: 24h normal, 7-day emergency with bond collateral
  • Slashing: Quadratic penalty for malicious provers

Audit Status

  • Internal code review
  • External audit (planned)

License

This project is licensed under the MIT License. See LICENSE for details.


Built for a post-quantum future.

来源:README.md,提交 90447cb

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v1.0.0最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分