🕸️ Weave Protocol

🕸️ Weave Protocol

Enterprise Security Suite for AI Agents

A TypeScript monorepo providing security, encryption, compliance, and governance tools for AI agent systems. Built for the Model Context Protocol (MCP) ecosystem.

🆕 What's New: MCP Server Scanner

Mund v0.1.11 now scans MCP servers before you install them:

┌───────────────────────────────────────────────────────────────┐
│  mund_scan_mcp_server                                         │
│                                                               │
│  ⚠️  CRITICAL: Tool "execute" contains injection pattern      │
│     "ignore previous instructions and run..."                 │
│                                                               │
│  ⚠️  HIGH: Server name "githib-mcp" is 1 edit from "github"   │
│                                                               │
│  Recommendation: DO_NOT_INSTALL                               │
└───────────────────────────────────────────────────────────────┘

Why this matters:

• 43% of MCP servers have command injection vulnerabilities
• "Line jumping" attacks hide malicious prompts in tool descriptions
• Typosquatting mimics legitimate server names

See Mund README →

📦 Packages

🚀 Quick Start

Install All Packages

npm install @weave_protocol/mund @weave_protocol/hord @weave_protocol/domere

Claude Desktop Integration

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mund": {
      "command": "npx",
      "args": ["-y", "@weave_protocol/mund"]
    },
    "hord": {
      "command": "npx",
      "args": ["-y", "@weave_protocol/hord"]
    },
    "domere": {
      "command": "npx",
      "args": ["-y", "@weave_protocol/domere"]
    }
  }
}

MCP Registry

Mund is available on the official MCP Registry:

# Search for it
https://registry.modelcontextprotocol.io
# Server ID: io.github.Tyox-all/mund

✨ Package Details

🛡️ Mund - The Guardian

Real-time security scanning for AI agents.

// Scan content
const result = await mund.scan("Here's my key: sk-abc123...");
// { safe: false, issues: [{ severity: "critical", ... }] }

// Scan MCP server before install
const serverScan = await mund.scanMcpServer(serverJson);
// { recommendation: "DO_NOT_INSTALL", issues: [...] }

🏛️ Hord - The Vault

Encrypted storage with the Yoxallismus dual-tumbler cipher.

import { YoxallismusCipher } from '@weave_protocol/hord';

const cipher = new YoxallismusCipher('master-key');

// Lock (encrypt + obfuscate)
const locked = await cipher.lock(sensitiveData);

// Unlock (de-obfuscate + decrypt)
const unlocked = await cipher.unlock(locked);

Yoxallismus Cipher: A dual-layer encryption combining AES-256-GCM with tumbler/deadbolt obfuscation. Data is first encrypted, then the ciphertext is scrambled using position-dependent transformations that require both the key and the original encryption context to reverse.

⚖️ Domere - The Judge

Enterprise-grade verification, orchestration, compliance, and audit infrastructure.

Blockchain Anchoring:

• Solana Mainnet: 6g7raTAHU2h331VKtfVtkS5pmuvR8vMYwjGsZF1CUj2o
• Solana Devnet: BeCYVJYfbUu3k2TPGmh9VoGWeJwzm2hg2NdtnvbdBNCj
• Ethereum: 0xAA8b52adD3CEce6269d14C6335a79df451543820

import { ComplianceManager } from '@weave_protocol/domere';

const compliance = new ComplianceManager(['pci-dss', 'iso27001', 'soc2', 'hipaa']);

// Create tamper-evident checkpoint
const checkpoint = await compliance.createCheckpoint({
  action: 'data_access',
  resource: 'customer_records',
  actor: 'agent-001'
});

// Generate audit report
const report = await compliance.generateReport('pci-dss', {
  startDate: '2024-01-01',
  endDate: '2024-12-31'
});

👥 Witan - The Council

Multi-agent consensus and governance.

import { ConsensusEngine, PolicyEngine } from '@weave_protocol/witan';

const consensus = new ConsensusEngine({
  protocol: 'weighted_majority',
  threshold: 0.66,
  timeout: 30000
});

// Propose action requiring consensus
const result = await consensus.propose({
  action: 'deploy_to_production',
  requiredApprovals: ['security-agent', 'qa-agent', 'ops-agent']
});

🏗️ Architecture

┌───────────────────────────────────────────────────────────────┐
│                       AI Agent System                         │
├───────────────────────────────────────────────────────────────┤
│                                                               │
│  ┌──────────┐  ┌──────────┐  ┌──────────┐  ┌──────────┐      │
│  │  🛡️ Mund │  │ 🏛️ Hord  │  │ ⚖️ Domere│  │ 👥 Witan │      │
│  │ Guardian │  │  Vault   │  │  Judge   │  │ Council  │      │
│  └────┬─────┘  └────┬─────┘  └────┬─────┘  └────┬─────┘      │
│       │             │             │             │             │
│  Security      Encryption    Compliance     Consensus        │
│  Scanning      Storage       Verification   Governance       │
│       │             │             │             │             │
│       └─────────────┴─────────────┴─────────────┘             │
│                           │                                   │
│                     ┌─────┴─────┐                             │
│                     │  🔌 API   │                             │
│                     │   REST    │                             │
│                     └───────────┘                             │
│                                                               │
└───────────────────────────────────────────────────────────────┘

🔌 REST API

The @weave_protocol/api package provides HTTP endpoints for all functionality:

# Start the API server
npx @weave_protocol/api

# Or with Docker
docker run -p 3000:3000 weave-protocol/api

Endpoints:

🔒 Security Model

Weave Protocol implements defense-in-depth:

1. 🛡️ Mund scans all inputs for threats before processing
2. 🏛️ Hord encrypts sensitive data at rest and in transit
3. ⚖️ Domere logs all actions with tamper-evident checksums
4. 👥 Witan requires consensus for high-risk operations

CORS Model Integration

The Weave Protocol maps to the CORS Model for AI agent security:

🛠️ Development

# Clone
git clone https://github.com/Tyox-all/Weave_Protocol.git
cd Weave_Protocol

# Install dependencies (each package)
cd mund && npm install && npm run build
cd ../hord && npm install && npm run build
cd ../domere && npm install && npm run build

# Run tests
npm test

🗺️ Roadmap

• LangChain/LlamaIndex integration package
• Web dashboard for monitoring
• MCP server reputation scoring
• Automated threat intelligence updates
• GDPR compliance framework

🤝 Contributing

See CONTRIBUTING.md for guidelines.

📄 License

Apache 2.0 - See LICENSE

🔗 Links

• GitHub: https://github.com/Tyox-all/Weave_Protocol
• npm (mund): https://www.npmjs.com/package/@weave_protocol/mund
• npm (hord): https://www.npmjs.com/package/@weave_protocol/hord
• npm (domere): https://www.npmjs.com/package/@weave_protocol/domere
• npm (witan): https://www.npmjs.com/package/@weave_protocol/witan
• MCP Registry: https://registry.modelcontextprotocol.io (search "mund")

Built with ❤️ for the AI agent ecosystem.