protect-mcp-demo

---
name: protect-mcp-demo
description: Run a harmless protect-mcp policy demonstration with synthetic proposals, signed receipts, and tamper detection. Use when the user wants to try protect-mcp without connecting a real MCP server.
---

# Try a policy and verify its receipts

Explain the three outcomes before running: one proposed call is allowed, one is denied, and an edited receipt fails verification. The helper evaluates proposals only; it never executes the proposed tools or changes host settings. This demo does not prove that a real MCP host routes traffic through the gateway.

Use the bundled [demo helper](scripts/demo.mjs). It requires Node.js 22 or later and npm, downloads the pinned packages from npm with lifecycle scripts disabled, and creates a test key and receipts in a new directory. Keep the test private key local.

Choose a new absolute directory whose parent exists. Under the user's authorization to run the demo, invoke:

```sh
node /absolute/path/to/this/skill/scripts/demo.mjs --workspace /absolute/path/to/new/protect-mcp-demo
```

Resolve the helper path from this installed skill. Pass the workspace as a single argument; do not interpolate untrusted text into a shell command. The helper refuses an existing directory and leaves its artifacts for inspection. It does not delete or overwrite the user's other work.

If terminal access is unavailable, give the user the helper command for a local checkout from the plugin README. Explain expected results, but do not claim a successful run. Do not ask them to upload private keys.

Read `demo-summary.json` after a successful run. Report the package versions, the two observed decisions, trusted-key chain verification, rejection of a changed receipt, and the workspace path. Link the original receipt log and verification report when local file links are supported. The signing key here is generated by the demo, so its success establishes self-test behavior, not an external issuer's authority.

Offer setup for one real MCP server as the next step. Do not turn on enforcement or install hooks merely because this exercise passed.

• SKILL.md 2 KB
• agents/openai.yaml 1 KB
• scripts/demo.mjs 7 KB
• scripts/no-network.cjs 1 KB