CoolFace
Apppublic

MCP-1st-Birthday/mcp-security-dashboard

sourceHugging Facemitupdated 10mo agoView on Hugging Face
0likes
App README

📊 MCP Security Dashboard (Hugging Face Space)

Real‑time visibility into requests flowing through your MCP Security Gateway:

  • —System health & downstream service latency
  • —Live audit stream (auto-refresh) with execution times
  • —Tool & server performance metrics
  • —User activity & block rates
  • —High‑risk / jailbreak attempt listing
  • —Manual LLM tool-call tester
  • —AI Analytics and Insights by Claude
  • — ---

🚀 Quick Deploy (Web UI)

  1. 1.Go to https://huggingface.co/new-space
  2. 2.Name: mcp-security-dashboard | SDK: Gradio | Hardware: CPU basic
  3. 3.Upload from dashboard/:
  4. 4.app.py
  5. 5.requirements.txt
  6. 6.Set Space variable (Settings → Variables & secrets):
   MCP_HOST=https://yukisui22--security-mcp-gateway-gateway.modal.run
  1. 1.Save. Build completes in ~2–3 minutes.
  2. 2.Open the Space → click "🔄 Refresh Health Status".

🔌 Prerequisites

  • —Deployed Modal gateway with URL (e.g. https://yukisui22--security-mcp-gateway-gateway.modal.run)
  • —Gateway logging enabled (writes audit lines to /tmp/audit.log.jsonl)
  • —Gateway exposes GET /audit/latest?limit=500 (added in modal/gateway.py).

🔐 Environment Variables

NamePurposeRequired
MCP_HOSTBase URL of your Security Gateway✅
GRADIO_PORTOverride port (HF sets automatically)❌
AUDIT_LOG_PATHLocal fallback path (rarely needed)❌

If MCP_HOST is set, the dashboard fetches remote audit data from MCP_HOST/audit/latest. If not set, it falls back to a local audit.log.jsonl file (useful for local dev).

🗂 Features

PanelDescription
System HealthStatus, tool counts, per-server latency & errors
Live Audit StreamAuto-refresh (2s) formatted chronological records
Tool & Server StatsAggregated counts, avg risk, block rate, avg exec time
User ActivityPer-user volume, blocks, last seen timestamp
High-Risk / JailbreakSorted list of top-risk or flagged attempts
LLM TesterManual POST to /tools/secure_call for experiments

👥 Team

Team Name: MemKrew

Team Members:

🧪 Manual Test (LLM Tester Tab)

Paste a JSON payload like:

json
{
  "user_id": "tester",
  "server": "fetch",
  "tool": "fetch",
  "arguments": {"url": "https://example.com", "max_length": 300},
  "llm_context": "Basic demo"
}

Click "Send" → check Live Audit Stream.

👩‍💻 Git Workflow (Alternative)

bash
git clone https://huggingface.co/spaces/YOUR_USERNAME/mcp-security-dashboard
cd mcp-security-dashboard
cp ../security-mcp/dashboard/app.py .
cp ../security-mcp/dashboard/requirements.txt .
cat > README.md <<'EOF'
---
title: MCP Security Dashboard
emoji: 📊
colorFrom: purple
colorTo: indigo
sdk: gradio
app_file: app.py
pinned: false
---
# MCP Security Dashboard
Visualize health, audit logs, and security activity from your Security MCP Gateway.
EOF
git add .
git commit -m "Initial dashboard"
git push

Then set MCP_HOST in Space Settings.

🛠 Troubleshooting

SymptomResolution
Health shows errorVerify MCP_HOST reachable; curl /health manually
Audit emptyGenerate traffic via Playground or LLM Tester tab
High-Risk tab blankNo threats yet (good!) or risk thresholds not met
CORS errorsGateway already adds permissive CORS; recheck URL correctness
Slow updatesReduce request frequency (audit stream interval)

📦 Dependencies

Minimal runtime in requirements.txt:

gradio>=4.0.0
requests>=2.31.0

🔒 Privacy & Logs

Audit entries may include user IDs and arguments. For public demos, avoid real PII in prompts.

📝 License

MIT (matches project). You may fork and adapt for your own MCP gateway variants.

🌟 Next Enhancements

  • —Pagination for large audit sets
  • —WebSocket streaming
  • —Role-based filtering / access control
  • —Graph visualizations for risk trends

Made for the MCP Hackathon 2025 · Secure by design.

Prerequisites

  • —Modal-deployed gateway URL (example):
  • —https://yukisui22--security-mcp-gateway-gateway.modal.run
  • —The gateway writes audit logs to /tmp/audit.log.jsonl (already configured in modal/gateway.py).
  • —This repo change adds a new endpoint on the gateway: GET /audit/latest?limit=500 which serves recent audit records as JSON for the dashboard.

Quick Deploy (Web UI)

  1. 1.Create a new Space: https://huggingface.co/new-space
  2. 2.Name: mcp-security-dashboard
  3. 3.SDK: Gradio
  4. 4.Hardware: CPU basic
  1. 1.Upload these files from dashboard/:
  2. 2.app.py
  3. 3.requirements.txt
  1. 1.Set the environment variable (Settings → Variables & secrets):
  2. 2.MCP_HOST = https://yukisui22--security-mcp-gateway-gateway.modal.run
  1. 1.Save and wait for the Space to build.
  1. 1.Open the Space and click "🔄 Refresh Health Status"; you should see status and downstream info.
  1. 1.The Live Audit Stream will auto-refresh and fetch recent entries from /audit/latest on the gateway.

Git Workflow

bash
# Create Space repo first (via HF UI) then locally:
 git clone https://huggingface.co/spaces/YOUR_USERNAME/mcp-security-dashboard
 cd mcp-security-dashboard
 
 # Copy files
 cp ../security-mcp/dashboard/app.py .
 cp ../security-mcp/dashboard/requirements.txt .
 
 # Optional: Add a README.md with frontmatter
 cat > README.md << 'EOF'
 ---
 title: MCP Security Dashboard
 emoji: 📊
 colorFrom: purple
 colorTo: indigo
 sdk: gradio
 app_file: app.py
 pinned: false
 ---
 
 # MCP Security Dashboard
 Visualize health, audit logs, and security activity from your Security MCP Gateway.
 EOF
 
 git add .
 git commit -m "Initial dashboard"
 git push

Then set the Space variable MCP_HOST in the Space settings to your Modal gateway URL.

Troubleshooting

  • —Live Audit shows "No audit records yet": send some traffic from the Playground or LLM Tester tab. The gateway must write audit logs.
  • —Health check fails: verify the gateway URL and that it's reachable from the Internet.
  • —CORS: Gateway already enables CORS; if issues persist, check DevTools → Network.